| Offset 1, 6 lines modified | Offset 1, 6 lines modified | ||
| 1 | ·3 | 1 | ·4d63eeaca15d7f4399171042cb436e92·153180·admin·optional·ssg-applications_0.1.74-1_all.deb |
| 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb | 2 | ·ac8190c89a75a5ee928afbdbfeafe241·31300·admin·optional·ssg-base_0.1.74-1_all.deb |
| 3 | ·be5f8414de58e539b71507ddad0ca1c6·2808900·admin·optional·ssg-debderived_0.1.74-1_all.deb | ||
| 4 | ·b62afb42f58a9cf04b3f19115b22e8c8·1232460·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | · | 3 | ·1b5c4c1dbf2672d286c4bafba4aa8f72·2809828·admin·optional·ssg-debderived_0.1.74-1_all.deb |
| 4 | ·4f188bb1d9da39298d4457867a82ff10·1232952·admin·optional·ssg-debian_0.1.74-1_all.deb | ||
| 5 | ·ca3a643eae297ce79ac6833c4aceef52·32378724·admin·optional·ssg-nondebian_0.1.74-1_all.deb | ||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····172 | 2 | -rw-r--r--···0········0········0·····1724·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0···1512 | 3 | -rw-r--r--···0········0········0···151264·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037fe0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ff0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038000:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038010:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038020:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038030:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038040:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038050:·6f66·2032·3032·3 | 00038050:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038060:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00038070:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00038080:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00038090:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000380a0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000380b0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch | 000380c0:·636f·6e74·656e·745f·6772·6f75·705f·6368··content_group_ch |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Upstream·STIG·for·Google·Chromium |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:google:chromium-browser | 54 | ····*·cpe:/a:google:chromium-browser |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m | 59 | ···1.·_\x8C_\x8h_\x8r_\x8o_\x8m_\x8i_\x8u_\x8m |
| 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 | 61 | Group ·Guide·to·the·Secure·Configuration·of·Chromium· Group·contains·1·group·and·37 |
| 62 | rules | 62 | rules |
| 63 | Group ·Chromium· Group·contains·37·rules | 63 | Group ·Chromium· Group·contains·37·rules |
| 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and | 64 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Chromium·is·an·open-source·web·browser,·powered·by·WebKit·(Blink),·and |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037fa0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037fb0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037fc0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037fd0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037fe0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037ff0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038000:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038010:·6173·206f·6620·3230·323 | 00038010:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038020:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038030:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038040:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038050:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038060:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038070:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038080:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis-node |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service | 57 | Group ·Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service |
| 58 | Group·contains·3·groups·and·15·rules | 58 | Group·contains·3·groups·and·15·rules |
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fa0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037fe0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037ff0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038000:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038010:·3 | 00038010:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038020:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038030:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038040:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038050:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038060:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038070:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00038080:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 | 46 | ····*·cpe:/a:amazon:elastic_kubernetes_service_node:1.21 |
| 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 | 47 | ····*·cpe:/o:amazon:elastic_kubernetes_service_node:1 |
| 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 | 48 | ····*·cpe:/a:amazon:elastic_kubernetes_service:1 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 56 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037cd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037ce0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cf0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d00:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d20:·6173·206f·6620·3230·323 | 00037d20:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d30:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d40:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d50:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d60:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d70:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d80:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d90:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CUSP·-·Common·User·Security·Profile·for·Mozilla·Firefox |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cusp_firefox |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/a:mozilla:firefox | 41 | ····*·cpe:/a:mozilla:firefox |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 46 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group | 48 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·1·group |
| 49 | and·9·rules | 49 | and·9·rules |
| 50 | Group ·Firefox· Group·contains·9·rules | 50 | Group ·Firefox· Group·contains·9·rules |
| 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web | 51 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Firefox·is·an·open-source·web·browser·and·developed·by·Mozilla.·Web |
| Offset 14332, 15 lines modified | Offset 14332, 15 lines modified | ||
| 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038020:·3 | 00038020:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" | 00038090:·745f·6772·6f75·705f·6669·7265·666f·7822··t_group_firefox" |
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Mozilla·Firefox·STIG |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/a:mozilla:firefox | 54 | ····*·cpe:/a:mozilla:firefox |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x | 59 | ···1.·_\x8F_\x8i_\x8r_\x8e_\x8f_\x8o_\x8x |
| 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d | 60 | ·········1.·_\x8T_\x8h_\x8e_\x8·_\x8D_\x8o_\x8D_\x8·_\x8R_\x8o_\x8o_\x8t_\x8·_\x8C_\x8e_\x8r_\x8t_\x8i_\x8f_\x8i_\x8c_\x8a_\x8t_\x8e_\x8·_\x8I_\x8s_\x8·_\x8R_\x8e_\x8q_\x8u_\x8i_\x8r_\x8e_\x8d |
| 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups | 62 | Group ·Guide·to·the·Secure·Configuration·of·Firefox· Group·contains·2·groups |
| 63 | and·34·rules | 63 | and·34·rules |
| 64 | Group ·Firefox· Group·contains·1·group·and·34·rules | 64 | Group ·Firefox· Group·contains·1·group·and·34·rules |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-chromium-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-chromium-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:google:chromium-browser"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Google·Chromium·Browser</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-chromium-cpe-oval.xml">oval:ssg-installed_app_is_chromium:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 40 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 1666, 15 lines modified | Offset 1666, 15 lines modified | ||
| 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1666 | ··········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> | 1667 | ············<xccdf-1.2:check-content-ref·href="ssg-chromium-ocil.xml"·name="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"/> |
| 1668 | ··········</xccdf-1.2:check> | 1668 | ··········</xccdf-1.2:check> |
| 1669 | ········</xccdf-1.2:Rule> | 1669 | ········</xccdf-1.2:Rule> |
| 1670 | ······</xccdf-1.2:Group> | 1670 | ······</xccdf-1.2:Group> |
| 1671 | ····</xccdf-1.2:Benchmark> | 1671 | ····</xccdf-1.2:Benchmark> |
| 1672 | ··</ds:component> | 1672 | ··</ds:component> |
| 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-0 | 1673 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1674 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1675 | ······<oval-def:generator> | 1675 | ······<oval-def:generator> |
| 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1676 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 1677 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 1678 | ········<oval:schema_version>5.11</oval:schema_version> | 1678 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1679 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1680 | ······</oval-def:generator> | 1680 | ······</oval-def:generator> |
| Offset 2530, 408 lines modified | Offset 2530, 408 lines modified | ||
| 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> | 2530 | ········<oval-def:external_variable·id="oval:ssg-var_enable_encrypted_searching:var:1"·version="1"·datatype="string"·comment="Expected·search·provider·name"/> |
| 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> | 2531 | ········<oval-def:external_variable·id="oval:ssg-var_extension_whitelist:var:1"·version="1"·datatype="string"·comment="Expected·approved·extensions"/> |
| 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> | 2532 | ········<oval-def:external_variable·id="oval:ssg-var_auth_schema:var:1"·version="1"·datatype="string"·comment="Expected·HTTP·authentication·type"/> |
| 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> | 2533 | ········<oval-def:external_variable·id="oval:ssg-var_trusted_home_page:var:1"·version="1"·datatype="string"·comment="Expected·home·page"/> |
| 2534 | ······</oval-def:variables> | 2534 | ······</oval-def:variables> |
| 2535 | ····</oval-def:oval_definitions> | 2535 | ····</oval-def:oval_definitions> |
| 2536 | ··</ds:component> | 2536 | ··</ds:component> |
| 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-0 | 2537 | ··<ds:component·id="scap_org.open-scap_comp_ssg-chromium-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2538 | ····<ocil:ocil> | 2538 | ····<ocil:ocil> |
| 2539 | ······<ocil:generator> | 2539 | ······<ocil:generator> |
| 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2540 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2541 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2542 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2543 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2544 | ······</ocil:generator> | 2544 | ······</ocil:generator> |
| 2545 | ······<ocil:questionnaires> | 2545 | ······<ocil:questionnaires> |
| 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_block_plugins_ocil:questionnaire:1"> | ||
| 2547 | ··········<ocil:title>Block·Plugins·by·Default</ocil:title> | ||
| 2548 | ··········<ocil:actions> | ||
| 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_block_plugins_action:testaction:1</ocil:test_action_ref> | ||
| 2550 | ··········</ocil:actions> | ||
| 2551 | ········</ocil:questionnaire> | ||
| 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2546 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> |
| 2553 | ··········<ocil:title>Disable·Chromium· | 2547 | ··········<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> |
| 2554 | ··········<ocil:actions> | 2548 | ··········<ocil:actions> |
| 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2549 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_firewall_traversal_action:testaction:1</ocil:test_action_ref> |
| 2556 | ··········</ocil:actions> | 2550 | ··········</ocil:actions> |
| 2557 | ········</ocil:questionnaire> | 2551 | ········</ocil:questionnaire> |
| 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> | 2552 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 2559 | ··········<ocil:title>Disable·Background·Processing</ocil:title> | 2553 | ··········<ocil:title>Disable·Background·Processing</ocil:title> |
| 2560 | ··········<ocil:actions> | 2554 | ··········<ocil:actions> |
| 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> | 2555 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 2562 | ··········</ocil:actions> | 2556 | ··········</ocil:actions> |
| 2563 | ········</ocil:questionnaire> | 2557 | ········</ocil:questionnaire> |
| 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_extension_whitelist_ocil:questionnaire:1"> | ||
| 2565 | ··········<ocil:title>Enable·Only·Approved·Extensions</ocil:title> | ||
| 2566 | ··········<ocil:actions> | ||
| 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_extension_whitelist_action:testaction:1</ocil:test_action_ref> | ||
| 2568 | ··········</ocil:actions> | ||
| 2569 | ········</ocil:questionnaire> | ||
| 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> | 2558 | ········<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 2571 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> | 2559 | ··········<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 2572 | ··········<ocil:actions> | 2560 | ··········<ocil:actions> |
| 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> | 2561 | ············<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 2574 | ··········</ocil:actions> | 2562 | ··········</ocil:actions> |
| 2575 | ········</ocil:questionnaire> | 2563 | ········</ocil:questionnaire> |
| 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2564 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> |
| 2577 | ··········<ocil:title>Disable· | 2565 | ··········<ocil:title>Disable·Incognito·Mode</ocil:title> |
| 2578 | ··········<ocil:actions> | 2566 | ··········<ocil:actions> |
| 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2567 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 2580 | ··········</ocil:actions> | 2568 | ··········</ocil:actions> |
| 2581 | ········</ocil:questionnaire> | 2569 | ········</ocil:questionnaire> |
| 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_d | 2570 | ········<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 2583 | ··········<ocil:title> | 2571 | ··········<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 2584 | ··········<ocil:actions> | 2572 | ··········<ocil:actions> |
| 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_d | 2573 | ············<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 2586 | ··········</ocil:actions> | 2574 | ··········</ocil:actions> |
| 2587 | ········</ocil:questionnaire> | 2575 | ········</ocil:questionnaire> |
| 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> | 2576 | ········<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> |
| 2589 | ··········<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> | 2577 | ··········<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> |
| 2590 | ··········<ocil:actions> | 2578 | ··········<ocil:actions> |
| 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> | 2579 | ············<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> |
| 2592 | ··········</ocil:actions> | 2580 | ··········</ocil:actions> |
| 2593 | ········</ocil:questionnaire> | 2581 | ········</ocil:questionnaire> |
| 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2582 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 2595 | ··········<ocil:title>Disable· | 2583 | ··········<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 2596 | ··········<ocil:actions> | 2584 | ··········<ocil:actions> |
| 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2585 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 2598 | ··········</ocil:actions> | 2586 | ··········</ocil:actions> |
| 2599 | ········</ocil:questionnaire> | 2587 | ········</ocil:questionnaire> |
| 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2588 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 2601 | ··········<ocil:title>Disable·All· | 2589 | ··········<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 2602 | ··········<ocil:actions> | 2590 | ··········<ocil:actions> |
| 2603 | ············<ocil:test_action_ref>ocil:ssg-chromium_ | 2591 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 2604 | ··········</ocil:actions> | 2592 | ··········</ocil:actions> |
| 2605 | ········</ocil:questionnaire> | 2593 | ········</ocil:questionnaire> |
| 2606 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 2594 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 2607 | ··········<ocil:title>Disable· | 2595 | ··········<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 2608 | ··········<ocil:actions> | 2596 | ··········<ocil:actions> |
| 2609 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 2597 | ············<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 2610 | ··········</ocil:actions> | 2598 | ··········</ocil:actions> |
| 2611 | ········</ocil:questionnaire> | 2599 | ········</ocil:questionnaire> |
| 2612 | ········<ocil:questionnaire·id="ocil:ssg-chromium_ | 2600 | ········<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 2613 | ··········<ocil:title> | 2601 | ··········<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 2614 | ··········<ocil:actions> | 2602 | ··········<ocil:actions> |
| Max diff block lines reached; 68388/80100 bytes (85.38%) of diff not shown. | |||
| Offset 3, 399 lines modified | Offset 3, 399 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_block_plugins_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Block·Plugins·by·Default</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_block_plugins_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 10 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_firewall_traversal_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Disable·Chromium· | 11 | ······<ocil:title>Disable·Chromium's·Ability·to·Traverse·Firewalls</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 13 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_firewall_traversal_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> | 16 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_background_processing_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·Background·Processing</ocil:title> | 17 | ······<ocil:title>Disable·Background·Processing</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> | 19 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_background_processing_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_extension_whitelist_ocil:questionnaire:1"> | ||
| 29 | ······<ocil:title>Enable·Only·Approved·Extensions</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_extension_whitelist_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> | 22 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_browser_history_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> | 23 | ······<ocil:title>Enable·Saving·the·Browser·History</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> | 25 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_browser_history_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 28 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_incognito_mode_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable· | 29 | ······<ocil:title>Disable·Incognito·Mode</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 31 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_incognito_mode_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 34 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_name_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 35 | ······<ocil:title>Set·the·Default·Search·Provider's·URL</ocil:title> |
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 37 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_name_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-chromium_whitelist_plugin_urls_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> | 41 | ······<ocil:title>Enable·Plugins·for·Only·Approved·URLs</ocil:title> |
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-chromium_whitelist_plugin_urls_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 46 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_outdated_plugins_ocil:questionnaire:1"> |
| 59 | ······<ocil:title>Disable· | 47 | ······<ocil:title>Disable·Outdated·Plugins</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 49 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_outdated_plugins_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 52 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_plugin_blacklist_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·All· | 53 | ······<ocil:title>Disable·All·Plugins·by·Default</ocil:title> |
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 55 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_plugin_blacklist_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 58 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_google_sync_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Disable· | 59 | ······<ocil:title>Disable·Data·Synchronization·to·Google</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 61 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_google_sync_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 64 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_saved_passwords_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Disable·Saved·Passwords</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 67 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_saved_passwords_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | ||
| 69 | ····</ocil:questionnaire> | ||
| 70 | ····<ocil:questionnaire·id="ocil:ssg-chromium_policy_file_ocil:questionnaire:1"> | ||
| 71 | ······<ocil:title>Ensure·the·Chromium·Policy·Configuration·File·Exists</ocil:title> | ||
| 72 | ······<ocil:actions> | ||
| 73 | ········<ocil:test_action_ref>ocil:ssg-chromium_policy_file_action:testaction:1</ocil:test_action_ref> | ||
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> | 76 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_session_cookies_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable·Session·Cookies</ocil:title> | 77 | ······<ocil:title>Disable·Session·Cookies</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> | 79 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_session_cookies_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-chromium_enable_encrypted_searching_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 83 | ······<ocil:title>Enable·Encrypted·Searching</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 85 | ········<ocil:test_action_ref>ocil:ssg-chromium_enable_encrypted_searching_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 88 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_cleartext_passwords_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 89 | ······<ocil:title>Disable·Use·of·Cleartext·Passwords</ocil:title> |
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 91 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_cleartext_passwords_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 94 | ····<ocil:questionnaire·id="ocil:ssg-chromium_trusted_home_page_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>Set·the·Default·Home·Page</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 97 | ········<ocil:test_action_ref>ocil:ssg-chromium_trusted_home_page_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_ | 100 | ····<ocil:questionnaire·id="ocil:ssg-chromium_disable_search_suggestions_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Disable· | 101 | ······<ocil:title>Disable·Search·Suggestion</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_ | 103 | ········<ocil:test_action_ref>ocil:ssg-chromium_disable_search_suggestions_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_d | 106 | ····<ocil:questionnaire·id="ocil:ssg-chromium_default_search_provider_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Enable·the·Default·Search·Provider</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_d | 109 | ········<ocil:test_action_ref>ocil:ssg-chromium_default_search_provider_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-chromium_ | 112 | ····<ocil:questionnaire·id="ocil:ssg-chromium_block_desktop_notifications_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Prevent·Desktop·Notifications</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-chromium_ | 115 | ········<ocil:test_action_ref>ocil:ssg-chromium_block_desktop_notifications_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| Max diff block lines reached; 59899/71155 bytes (84.18%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_CHROMIUM"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Chromium</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of | 7 | configuration·settings·for·Chromium.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-eks-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-eks-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service:1"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/a:amazon:elastic_kubernetes_service_node:1.21"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·1.21</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:amazon:elastic_kubernetes_service_node:1"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">Amazon·Elastic·Kubernetes·Service·Node</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-eks-cpe-oval.xml">oval:ssg-installed_app_is_eks_node:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 48 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 1490, 15 lines modified | Offset 1490, 15 lines modified | ||
| 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> | 1490 | ··············<xccdf-1.2:check-content-ref·href="ssg-eks-ocil.xml"·name="ocil:ssg-file_permissions_worker_kubeconfig_ocil:questionnaire:1"/> |
| 1491 | ············</xccdf-1.2:check> | 1491 | ············</xccdf-1.2:check> |
| 1492 | ··········</xccdf-1.2:Rule> | 1492 | ··········</xccdf-1.2:Rule> |
| 1493 | ········</xccdf-1.2:Group> | 1493 | ········</xccdf-1.2:Group> |
| 1494 | ······</xccdf-1.2:Group> | 1494 | ······</xccdf-1.2:Group> |
| 1495 | ····</xccdf-1.2:Benchmark> | 1495 | ····</xccdf-1.2:Benchmark> |
| 1496 | ··</ds:component> | 1496 | ··</ds:component> |
| 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-0 | 1497 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 1498 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 1499 | ······<oval-def:generator> | 1499 | ······<oval-def:generator> |
| 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 1500 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 1501 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 1502 | ········<oval:schema_version>5.11</oval:schema_version> | 1502 | ········<oval:schema_version>5.11</oval:schema_version> |
| 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 1503 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 1504 | ······</oval-def:generator> | 1504 | ······</oval-def:generator> |
| Offset 2111, 226 lines modified | Offset 2111, 226 lines modified | ||
| 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> | 2111 | ········<oval-def:external_variable·id="oval:ssg-var_streaming_connection_timeouts:var:1"·version="1"·datatype="string"·comment="variable"/> |
| 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> | 2112 | ········<oval-def:local_variable·id="oval:ssg-kubelet_read_only_port_secured_file_location:var:1"·version="1"·datatype="string"·comment="The·actual·path·of·the·file·to·scan."> |
| 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> | 2113 | ··········<oval-def:literal_component>/etc/kubernetes/compliance-operator/kubeletconfig/openscap-kubeletconfig</oval-def:literal_component> |
| 2114 | ········</oval-def:local_variable> | 2114 | ········</oval-def:local_variable> |
| 2115 | ······</oval-def:variables> | 2115 | ······</oval-def:variables> |
| 2116 | ····</oval-def:oval_definitions> | 2116 | ····</oval-def:oval_definitions> |
| 2117 | ··</ds:component> | 2117 | ··</ds:component> |
| 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-0 | 2118 | ··<ds:component·id="scap_org.open-scap_comp_ssg-eks-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 2119 | ····<ocil:ocil> | 2119 | ····<ocil:ocil> |
| 2120 | ······<ocil:generator> | 2120 | ······<ocil:generator> |
| 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 2121 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 2122 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> | 2123 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 2124 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 2125 | ······</ocil:generator> | 2125 | ······</ocil:generator> |
| 2126 | ······<ocil:questionnaires> | 2126 | ······<ocil:questionnaires> |
| 2127 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_s | 2127 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 2128 | ··········<ocil:title>kubelet·-· | 2128 | ··········<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 2129 | ··········<ocil:actions> | 2129 | ··········<ocil:actions> |
| 2130 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_s | 2130 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 2131 | ··········</ocil:actions> | 2131 | ··········</ocil:actions> |
| 2132 | ········</ocil:questionnaire> | 2132 | ········</ocil:questionnaire> |
| 2133 | ········<ocil:questionnaire·id="ocil:ssg-f | 2133 | ········<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> |
| 2134 | ··········<ocil:title> | 2134 | ··········<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> |
| 2135 | ··········<ocil:actions> | 2135 | ··········<ocil:actions> |
| 2136 | ············<ocil:test_action_ref>ocil:ssg-f | 2136 | ············<ocil:test_action_ref>ocil:ssg-fargate_action:testaction:1</ocil:test_action_ref> |
| 2137 | ··········</ocil:actions> | 2137 | ··········</ocil:actions> |
| 2138 | ········</ocil:questionnaire> | 2138 | ········</ocil:questionnaire> |
| 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> | 2139 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 2140 | ··········<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> | 2140 | ··········<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 2141 | ··········<ocil:actions> | 2141 | ··········<ocil:actions> |
| 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> | 2142 | ············<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 2143 | ··········</ocil:actions> | 2143 | ··········</ocil:actions> |
| 2144 | ········</ocil:questionnaire> | 2144 | ········</ocil:questionnaire> |
| 2145 | ········<ocil:questionnaire·id="ocil:ssg- | 2145 | ········<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> |
| 2146 | ··········<ocil:title>Ensure·Image·Vulnerability·Scanning</ocil:title> | ||
| 2146 | ··········<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> | ||
| 2147 | ··········<ocil:actions> | ||
| 2148 | ············<ocil:test_action_ref>ocil:ssg-fargate_action:testaction:1</ocil:test_action_ref> | ||
| 2149 | ··········</ocil:actions> | ||
| 2150 | ········</ocil:questionnaire> | ||
| 2151 | ········<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> | ||
| 2152 | ··········<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> | ||
| 2153 | ··········<ocil:actions> | 2147 | ··········<ocil:actions> |
| 2154 | ············<ocil:test_action_ref>ocil:ssg- | 2148 | ············<ocil:test_action_ref>ocil:ssg-image_scanning_action:testaction:1</ocil:test_action_ref> |
| 2155 | ··········</ocil:actions> | 2149 | ··········</ocil:actions> |
| 2156 | ········</ocil:questionnaire> | 2150 | ········</ocil:questionnaire> |
| 2157 | ········<ocil:questionnaire·id="ocil:ssg- | 2151 | ········<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 2158 | ··········<ocil:title> | 2152 | ··········<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> |
| 2159 | ··········<ocil:actions> | 2153 | ··········<ocil:actions> |
| 2160 | ············<ocil:test_action_ref>ocil:ssg- | 2154 | ············<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 2161 | ··········</ocil:actions> | 2155 | ··········</ocil:actions> |
| 2162 | ········</ocil:questionnaire> | 2156 | ········</ocil:questionnaire> |
| 2163 | ········<ocil:questionnaire·id="ocil:ssg- | 2157 | ········<ocil:questionnaire·id="ocil:ssg-endpoint_configuration_ocil:questionnaire:1"> |
| 2164 | ··········<ocil:title>Ensure· | 2158 | ··········<ocil:title>Ensure·Private·Endpoint·Access</ocil:title> |
| 2165 | ··········<ocil:actions> | 2159 | ··········<ocil:actions> |
| 2166 | ············<ocil:test_action_ref>ocil:ssg- | 2160 | ············<ocil:test_action_ref>ocil:ssg-endpoint_configuration_action:testaction:1</ocil:test_action_ref> |
| 2167 | ··········</ocil:actions> | 2161 | ··········</ocil:actions> |
| 2168 | ········</ocil:questionnaire> | 2162 | ········</ocil:questionnaire> |
| 2169 | ········<ocil:questionnaire·id="ocil:ssg- | 2163 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 2170 | ··········<ocil:title> | 2164 | ··········<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 2171 | ··········<ocil:actions> | 2165 | ··········<ocil:actions> |
| 2172 | ············<ocil:test_action_ref>ocil:ssg- | 2166 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 2173 | ··········</ocil:actions> | 2167 | ··········</ocil:actions> |
| 2174 | ········</ocil:questionnaire> | 2168 | ········</ocil:questionnaire> |
| 2175 | ········<ocil:questionnaire·id="ocil:ssg- | 2169 | ········<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 2176 | ··········<ocil:title> | 2170 | ··········<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 2177 | ··········<ocil:actions> | 2171 | ··········<ocil:actions> |
| 2178 | ············<ocil:test_action_ref>ocil:ssg- | 2172 | ············<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 2179 | ··········</ocil:actions> | 2173 | ··········</ocil:actions> |
| 2180 | ········</ocil:questionnaire> | 2174 | ········</ocil:questionnaire> |
| 2181 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> | 2175 | ········<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 2182 | ··········<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | 2176 | ··········<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 2183 | ··········<ocil:actions> | 2177 | ··········<ocil:actions> |
| 2184 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | 2178 | ············<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 2185 | ··········</ocil:actions> | 2179 | ··········</ocil:actions> |
| 2186 | ········</ocil:questionnaire> | 2180 | ········</ocil:questionnaire> |
| Max diff block lines reached; 78468/89869 bytes (87.31%) of diff not shown. | |||
| Offset 3, 217 lines modified | Offset 3, 217 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_s | 10 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_server_cert_rotation_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>kubelet·-· | 11 | ······<ocil:title>kubelet·-·Enable·Server·Certificate·Rotation</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_s | 13 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_server_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-f | 16 | ····<ocil:questionnaire·id="ocil:ssg-fargate_ocil:questionnaire:1"> |
| 17 | ······<ocil:title> | 17 | ······<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> |
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-f | 19 | ········<ocil:test_action_ref>ocil:ssg-fargate_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> | 22 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_authorization_mode_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> | 23 | ······<ocil:title>Ensure·authorization·is·set·to·Webhook</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> | 25 | ········<ocil:test_action_ref>ocil:ssg-kubelet_authorization_mode_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-image_scanning_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·Image·Vulnerability·Scanning</ocil:title> | ||
| 29 | ······<ocil:title>Consider·Fargate·for·Untrusted·Workloads</ocil:title> | ||
| 30 | ······<ocil:actions> | ||
| 31 | ········<ocil:test_action_ref>ocil:ssg-fargate_action:testaction:1</ocil:test_action_ref> | ||
| 32 | ······</ocil:actions> | ||
| 33 | ····</ocil:questionnaire> | ||
| 34 | ····<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> | ||
| 35 | ······<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> | ||
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-image_scanning_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-dedicated_service_accounts_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 35 | ······<ocil:title>Use·Dedicated·Service·Accounts</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-dedicated_service_accounts_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-endpoint_configuration_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure· | 41 | ······<ocil:title>Ensure·Private·Endpoint·Access</ocil:title> |
| 48 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-endpoint_configuration_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_iptables_util_chains_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 47 | ······<ocil:title>kubelet·-·Allow·Automatic·Firewall·Configuration</ocil:title> |
| 54 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_iptables_util_chains_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_client_cert_rotation_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 53 | ······<ocil:title>kubelet·-·Enable·Client·Certificate·Rotation</ocil:title> |
| 60 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_client_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> | 58 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_worker_kubeconfig_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> | 59 | ······<ocil:title>Verify·Group·Who·Owns·The·Worker·Kubeconfig·File</ocil:title> |
| 66 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> | 61 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_worker_kubeconfig_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 64 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_read_only_port_secured_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure· | 65 | ······<ocil:title>kubelet·-·Ensure·that·the·--read-only-port·is·secured</ocil:title> |
| 72 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kubelet_read_only_port_secured_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_cert_rotation_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 71 | ······<ocil:title>kubelet·-·Enable·Certificate·Rotation</ocil:title> |
| 78 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_cert_rotation_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-approved_registries_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 77 | ······<ocil:title>Only·use·approved·container·registries</ocil:title> |
| 84 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-approved_registries_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-secret_encryption_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure· | 83 | ······<ocil:title>Ensure·Kubernetes·Secrets·are·Encrypted</ocil:title> |
| 90 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-secret_encryption_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_kubelet_conf_ocil:questionnaire:1"> | ||
| 95 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-configure_network_policy_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Ensure·Network·Policy·is·Enabled</ocil:title> | ||
| 96 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-configure_network_policy_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-kubelet_enable_protect_kernel_defaults_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 95 | ······<ocil:title>kubelet·-·Enable·Protect·Kernel·Defaults</ocil:title> |
| 102 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-kubelet_enable_protect_kernel_defaults_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-i | 100 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_kubelet_conf_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 101 | ······<ocil:title>Verify·User·Who·Owns·The·Kubelet·Configuration·File</ocil:title> |
| 108 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-i | 103 | ········<ocil:test_action_ref>ocil:ssg-file_owner_kubelet_conf_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-private_nodes_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 107 | ······<ocil:title>Ensure·Cluster·Private·Nodes</ocil:title> |
| 114 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 109 | ········<ocil:test_action_ref>ocil:ssg-private_nodes_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 112 | ····<ocil:questionnaire·id="ocil:ssg-configure_tls_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 113 | ······<ocil:title>Encrypt·Traffic·to·Load·Balancers·and·Workloads</ocil:title> |
| 120 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-configure_tls_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-re | 118 | ····<ocil:questionnaire·id="ocil:ssg-registry_access_ocil:questionnaire:1"> |
| 125 | ······<ocil:title> | 119 | ······<ocil:title>Minimize·user·access·to·Amazon·ECR</ocil:title> |
| 126 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 127 | ········<ocil:test_action_ref>ocil:ssg-re | 121 | ········<ocil:test_action_ref>ocil:ssg-registry_access_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 69203/80910 bytes (85.53%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_EKS"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Elastic·Kubernetes·Service</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Elastic·Kubernetes·Service.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-firefox-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-firefox-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/a:mozilla:firefox"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Mozilla·Firefox</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-firefox-cpe-oval.xml">oval:ssg-installed_app_is_firefox:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 40 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation.··The·SCAP·content·is | 42 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 43 | is·available·in·the | 43 | is·available·in·the |
| Offset 3479, 15 lines modified | Offset 3479, 15 lines modified | ||
| 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> | 3479 | ··············<xccdf-1.2:check-content-ref·href="ssg-firefox-ocil.xml"·name="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"/> |
| 3480 | ············</xccdf-1.2:check> | 3480 | ············</xccdf-1.2:check> |
| 3481 | ··········</xccdf-1.2:Rule> | 3481 | ··········</xccdf-1.2:Rule> |
| 3482 | ········</xccdf-1.2:Group> | 3482 | ········</xccdf-1.2:Group> |
| 3483 | ······</xccdf-1.2:Group> | 3483 | ······</xccdf-1.2:Group> |
| 3484 | ····</xccdf-1.2:Benchmark> | 3484 | ····</xccdf-1.2:Benchmark> |
| 3485 | ··</ds:component> | 3485 | ··</ds:component> |
| 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-0 | 3486 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 3487 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 3488 | ······<oval-def:generator> | 3488 | ······<oval-def:generator> |
| 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 3489 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 3490 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 3491 | ········<oval:schema_version>5.11</oval:schema_version> | 3491 | ········<oval:schema_version>5.11</oval:schema_version> |
| 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 3492 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 3493 | ······</oval-def:generator> | 3493 | ······</oval-def:generator> |
| Offset 5189, 320 lines modified | Offset 5189, 320 lines modified | ||
| 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> | 5189 | ··············<oval-def:literal_component>/distribution</oval-def:literal_component> |
| 5190 | ············</oval-def:concat> | 5190 | ············</oval-def:concat> |
| 5191 | ··········</oval-def:unique> | 5191 | ··········</oval-def:unique> |
| 5192 | ········</oval-def:local_variable> | 5192 | ········</oval-def:local_variable> |
| 5193 | ······</oval-def:variables> | 5193 | ······</oval-def:variables> |
| 5194 | ····</oval-def:oval_definitions> | 5194 | ····</oval-def:oval_definitions> |
| 5195 | ··</ds:component> | 5195 | ··</ds:component> |
| 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-0 | 5196 | ··<ds:component·id="scap_org.open-scap_comp_ssg-firefox-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 5197 | ····<ocil:ocil> | 5197 | ····<ocil:ocil> |
| 5198 | ······<ocil:generator> | 5198 | ······<ocil:generator> |
| 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 5199 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5200 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> | 5201 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 5202 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 5203 | ······</ocil:generator> | 5203 | ······</ocil:generator> |
| 5204 | ······<ocil:questionnaires> | 5204 | ······<ocil:questionnaires> |
| 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5205 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 5206 | ··········<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> | ||
| 5206 | ··········<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> | ||
| 5207 | ··········<ocil:actions> | ||
| 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> | ||
| 5209 | ··········</ocil:actions> | ||
| 5210 | ········</ocil:questionnaire> | ||
| 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 5212 | ··········<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 5213 | ··········<ocil:actions> | 5207 | ··········<ocil:actions> |
| 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-c | 5208 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 5215 | ··········</ocil:actions> | 5209 | ··········</ocil:actions> |
| 5216 | ········</ocil:questionnaire> | 5210 | ········</ocil:questionnaire> |
| 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5211 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 5218 | ··········<ocil:title> | 5212 | ··········<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 5219 | ··········<ocil:actions> | 5213 | ··········<ocil:actions> |
| 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5214 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 5221 | ··········</ocil:actions> | 5215 | ··········</ocil:actions> |
| 5222 | ········</ocil:questionnaire> | 5216 | ········</ocil:questionnaire> |
| 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 5224 | ········ | 5217 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 5218 | ··········<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> | ||
| 5225 | ··········<ocil:actions> | 5219 | ··········<ocil:actions> |
| 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_p | 5220 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 5227 | ··········</ocil:actions> | 5221 | ··········</ocil:actions> |
| 5228 | ········</ocil:questionnaire> | 5222 | ········</ocil:questionnaire> |
| 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 5223 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 5230 | ··········<ocil:title> | 5224 | ··········<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 5231 | ··········<ocil:actions> | 5225 | ··········<ocil:actions> |
| 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy- | 5226 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> |
| 5233 | ··········</ocil:actions> | 5227 | ··········</ocil:actions> |
| 5234 | ········</ocil:questionnaire> | 5228 | ········</ocil:questionnaire> |
| 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> | 5229 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 5236 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> | 5230 | ··········<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 5237 | ··········<ocil:actions> | 5231 | ··········<ocil:actions> |
| 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> | 5232 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 5239 | ··········</ocil:actions> | 5233 | ··········</ocil:actions> |
| 5240 | ········</ocil:questionnaire> | 5234 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> | ||
| 5242 | ··········<ocil:title>Enable·Certificate·Verification</ocil:title> | ||
| 5243 | ··········<ocil:actions> | ||
| 5244 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> | ||
| 5245 | ··········</ocil:actions> | ||
| 5246 | ········</ocil:questionnaire> | ||
| 5247 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> | ||
| 5248 | ··········<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> | ||
| 5249 | ··········<ocil:actions> | ||
| 5250 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> | ||
| 5251 | ··········</ocil:actions> | ||
| 5252 | ········</ocil:questionnaire> | ||
| 5253 | ········<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> | ||
| 5254 | ··········<ocil:title>Enable·Shared·System·Certificates</ocil:title> | ||
| 5255 | ··········<ocil:actions> | ||
| 5256 | ············<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> | ||
| 5257 | ··········</ocil:actions> | ||
| 5258 | ········</ocil:questionnaire> | ||
| 5259 | ········<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> | ||
| 5260 | ··········<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> | ||
| 5261 | ··········<ocil:actions> | ||
| 5262 | ············<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> | ||
| 5263 | ··········</ocil:actions> | ||
| 5264 | ········</ocil:questionnaire> | ||
| 5265 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> | 5235 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 5266 | ··········<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> | 5236 | ··········<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 5267 | ··········<ocil:actions> | 5237 | ··········<ocil:actions> |
| 5268 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> | 5238 | ············<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 5269 | ··········</ocil:actions> | 5239 | ··········</ocil:actions> |
| 5270 | ········</ocil:questionnaire> | 5240 | ········</ocil:questionnaire> |
| 5241 | ········<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> | ||
| Max diff block lines reached; 44534/54784 bytes (81.29%) of diff not shown. | |||
| Offset 3, 311 lines modified | Offset 3, 311 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 10 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-content_blocker_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Ensure·the·Content·Blocker·uBlock·Origin·is·Installed</ocil:title> | ||
| 11 | ······<ocil:title>Enabled·Firefox·Enhanced·Tracking·Protection</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-enhanced_tracking_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-c | 13 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-content_blocker_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 16 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-private_browsing_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 17 | ······<ocil:title>Firefox·private·browsing·must·be·disabled.</ocil:title> |
| 24 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 19 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-private_browsing_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-dod_root_certificate_installed_ocil:questionnaire:1"> | ||
| 29 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_changes_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Disable·JavaScript's·Raise·Or·Lower·Windows·Capability</ocil:title> | ||
| 30 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_p | 25 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_changes_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 28 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_pocket_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 29 | ······<ocil:title>Disable·Firefox·Pocket</ocil:title> |
| 36 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 31 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_pocket_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> | 34 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-javascript_window_resizing_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> | 35 | ······<ocil:title>Disable·JavaScript's·Moving·Or·Resizing·Windows·Capability</ocil:title> |
| 42 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> | 37 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-javascript_window_resizing_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-verification_ocil:questionnaire:1"> | ||
| 47 | ······<ocil:title>Enable·Certificate·Verification</ocil:title> | ||
| 48 | ······<ocil:actions> | ||
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-verification_action:testaction:1</ocil:test_action_ref> | ||
| 50 | ······</ocil:actions> | ||
| 51 | ····</ocil:questionnaire> | ||
| 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> | ||
| 53 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> | ||
| 54 | ······<ocil:actions> | ||
| 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> | ||
| 56 | ······</ocil:actions> | ||
| 57 | ····</ocil:questionnaire> | ||
| 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-enable_ca_trust_ocil:questionnaire:1"> | ||
| 59 | ······<ocil:title>Enable·Shared·System·Certificates</ocil:title> | ||
| 60 | ······<ocil:actions> | ||
| 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-enable_ca_trust_action:testaction:1</ocil:test_action_ref> | ||
| 62 | ······</ocil:actions> | ||
| 63 | ····</ocil:questionnaire> | ||
| 64 | ····<ocil:questionnaire·id="ocil:ssg-installed_firefox_version_supported_ocil:questionnaire:1"> | ||
| 65 | ······<ocil:title>Supported·Version·of·Firefox·Installed</ocil:title> | ||
| 66 | ······<ocil:actions> | ||
| 67 | ········<ocil:test_action_ref>ocil:ssg-installed_firefox_version_supported_action:testaction:1</ocil:test_action_ref> | ||
| 68 | ······</ocil:actions> | ||
| 69 | ····</ocil:questionnaire> | ||
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> | 40 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-pop-up_windows_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> | 41 | ······<ocil:title>Enable·Firefox·Pop-up·Blocker</ocil:title> |
| 72 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> | 43 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-pop-up_windows_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-network_prediction_ocil:questionnaire:1"> | ||
| 47 | ······<ocil:title>Disable·Firefox·network·prediction</ocil:title> | ||
| 48 | ······<ocil:actions> | ||
| 49 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-network_prediction_action:testaction:1</ocil:test_action_ref> | ||
| 50 | ······</ocil:actions> | ||
| 51 | ····</ocil:questionnaire> | ||
| 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> | 52 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-forget_button_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> | 53 | ······<ocil:title>Firefox·must·prevent·the·user·from·quickly·deleting·data.</ocil:title> |
| 78 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> | 55 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-forget_button_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> | 58 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_update_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> | 59 | ······<ocil:title>Disable·Installed·Search·Plugins·Update·Checking</ocil:title> |
| 84 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> | 61 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_update_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 64 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-autoplay_video_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 65 | ······<ocil:title>Firefox·autoplay·must·be·disabled.</ocil:title> |
| 90 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-autoplay_video_action:testaction:1</ocil:test_action_ref> | ||
| 68 | ······</ocil:actions> | ||
| 69 | ····</ocil:questionnaire> | ||
| 70 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-telemetry_ocil:questionnaire:1"> | ||
| 71 | ······<ocil:title>Disable·Firefox·Telemetry</ocil:title> | ||
| 72 | ······<ocil:actions> | ||
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 73 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-telemetry_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> | 76 | ····<ocil:questionnaire·id="ocil:ssg-firefox_preferences-auto-download_actions_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> | 77 | ······<ocil:title>Disable·auto-download·for·proscribed·MIME·types.</ocil:title> |
| 96 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> | 79 | ········<ocil:test_action_ref>ocil:ssg-firefox_preferences-auto-download_actions_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> | 82 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-disable_deprecated_ciphers_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> | 83 | ······<ocil:title>Disable·Firefox·deprecated·ciphers</ocil:title> |
| 102 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> | 85 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-disable_deprecated_ciphers_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy- | 88 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-search_suggestion_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 89 | ······<ocil:title>Firefox·search·suggestions·must·be·disabled.</ocil:title> |
| 108 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-search_suggestion_action:testaction:1</ocil:test_action_ref> | ||
| 92 | ······</ocil:actions> | ||
| 93 | ····</ocil:questionnaire> | ||
| 94 | ····<ocil:questionnaire·id="ocil:ssg-firefox_policy-cryptomining_ocil:questionnaire:1"> | ||
| 95 | ······<ocil:title>Enabled·Firefox·Cryptomining·protection</ocil:title> | ||
| 96 | ······<ocil:actions> | ||
| 109 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy- | 97 | ········<ocil:test_action_ref>ocil:ssg-firefox_policy-cryptomining_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 38304/47442 bytes (80.74%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_FIREFOX"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Firefox</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of | 7 | configuration·settings·for·Firefox.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····2740·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····2740·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··280 | 3 | -rw-r--r--···0········0········0··2806896·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 28017, 95 lines modified | Offset 28017, 95 lines modified | ||
| 0006d700:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0006d700:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0006d710:·743d·2223·6964·6d39·3537·3222·2074·6162··t="#idm9572"·tab | 0006d710:·743d·2223·6964·6d39·3537·3222·2074·6162··t="#idm9572"·tab | ||
| 0006d720:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0006d720:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0006d730:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0006d730:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0006d740:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0006d740:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0006d750:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0006d750:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0006d760:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0006d760:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0006d770:·2122·3e52·656d·6564·6961·7469·6f6e·205 | 0006d770:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | ||
| 0006d780:· | 0006d780:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | ||
| 0006d790:· | 0006d790:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0006d7a0:· | 0006d7a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0006d7b0:· | 0006d7b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0006d7c0:· | 0006d7c0:·6964·6d39·3537·3222·3e3c·7461·626c·6520··idm9572"><table· | ||
| 0006d7d0:·6 | 0006d7d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0006d7e0:·6 | 0006d7e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0006d7f0:· | 0006d7f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0006d800:·6 | 0006d800:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0006d810:· | 0006d810:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0006d820:· | 0006d820:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0006d830:· | 0006d830:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0006d840:·7 | 0006d840:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0006d850:·6 | 0006d850:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0006d860:· | 0006d860:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0006d870:· | 0006d870:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0006d880:· | 0006d880:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0006d890:·7 | 0006d890:·7465·6779·3a3c·2f74·683e·3c74·643e·6469··tegy:</th><td>di | ||
| 0006d8a0:· | 0006d8a0:·7361·626c·653c·2f74·643e·3c2f·7472·3e3c··sable</td></tr>< | ||
| 0006d8b0:· | 0006d8b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0006d8c0:·653e·0a23·2043·4155·5449·4f4e·3a20·5468··e>.#·CAUTION:·Th | |||
| 0006d8d0:·6973·2072·656d·6564·6961·7469·6f6e·2073··is·remediation·s | |||
| 0006d8e0:·6372·6970·7420·7769·6c6c·2072·656d·6f76··cript·will·remov | |||
| 0006d8c0:·6f64·653e·696e·636c·7564·6520·7265·6d6f··ode>include·remo | |||
| 0006d8d0:·7665·5f69·6e65·7475·7469·6c73·2d74·656c··ve_inetutils-tel | |||
| 0006d8e0:·6e65·7464·0a0a·636c·6173·7320·7265·6d6f··netd..class·remo | |||
| 0006d8f0:·7665·5f69·6e65·7475·7469·6c73·2d74·656c··ve_inetutils-tel | |||
| 0006d900:·6e65·7464·207b·0a20·2070·6163·6b61·6765··netd·{.··package | |||
| 0006d | 0006d8f0:·6520·696e·6574·7574·696c·732d·7465·6c6e··e·inetutils-teln | ||
| 0006d900:·6574·640a·2309·2020·2066·726f·6d20·7468··etd.#.···from·th | |||
| 0006d910:·6520·7379·7374·656d·2c20·616e·6420·6d61··e·system,·and·ma | |||
| 0006d920:·7920·7265·6d6f·7665·2061·6e79·2070·6163··y·remove·any·pac | |||
| 0006d930:·6b61·6765·730a·2309·2020·2074·6861·7420··kages.#.···that· | |||
| 0006d940:·6465·7065·6e64·206f·6e20·696e·6574·7574··depend·on·inetut | |||
| 0006d950:·696c·732d·7465·6c6e·6574·642e·2045·7865··ils-telnetd.·Exe | |||
| 0006d960:·6375·7465·2074·6869·730a·2309·2020·2072··cute·this.#.···r | |||
| 0006d970:·656d·6564·6961·7469·6f6e·2041·4654·4552··emediation·AFTER | |||
| 0006d980:·2074·6573·7469·6e67·206f·6e20·6120·6e6f···testing·on·a·no | |||
| 0006d990:·6e2d·7072·6f64·7563·7469·6f6e·0a23·0920··n-production.#.· | |||
| 0006d9a0:·2020·7379·7374·656d·210a·0a44·4542·4941····system!..DEBIA | |||
| 0006d9b0:·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e·696e··N_FRONTEND=nonin | |||
| 0006d9c0:·7465·7261·6374·6976·6520·6170·742d·6765··teractive·apt-ge | |||
| 0006d9d0:·7420·7265·6d6f·7665·202d·7920·2269·6e65··t·remove·-y·"ine | |||
| 0006d9e0:·7475·7469·6c73·2d74·656c·6e65·7464·220a··tutils-telnetd". | |||
| 0006d9f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0006d920:·6c6e·6574·6427·3a0a·2020·2020·656e·7375··lnetd':.····ensu | |||
| 0006d930:·7265·203d·2667·743b·2027·7075·7267·6564··re·=>·'purged | |||
| 0006d940:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0006d950:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0006d960:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0006d970:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0006d980:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0006d990:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 0006d9a0:·3537·3322·2074·6162·696e·6465·783d·2230··573"·tabindex="0 | |||
| 0006d9b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0006d9c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0006d9d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0006d9e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0006d9f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0006da00:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0006da10:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0006da20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0006da30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0006da40:·7365·2220·6964·3d22·6964·6d39·3537·3322··se"·id="idm9573" | |||
| 0006da | 0006da00:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0006da60:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0006da70:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0006da80:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0006da90:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0006daa0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0006dab0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0006da | 0006da10:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0006da20:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0006da30:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0006da40:·3d22·2369·646d·3935·3733·2220·7461·6269··="#idm9573"·tabi | |||
| 0006da50:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0006da60:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0006da70:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0006da80:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0006da90:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0006daa0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0006dab0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0006dac0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006dad0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006dae0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006daf0:·2269·646d·3935·3733·223e·3c74·6162·6c65··"idm9573"><table | |||
| 0006db00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006db10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006db20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006db30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006db40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006d | 0006db50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0006db60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006db70:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006db80:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006db90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006dba0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006d | 0006dbb0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0006d | 0006dbc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0006db | 0006dbd0:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0006dbe0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0006dbf0:·6465·3e69·6e63·6c75·6465·2072·656d·6f76··de>include·remov | |||
| 0006db10:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| Max diff block lines reached; 68304/81190 bytes (84.13%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3426, 39 lines modified | Offset 3426, 39 lines modified | ||
| 3426 | ··-·NIST-800-53-CM-7(b) | 3426 | ··-·NIST-800-53-CM-7(b) |
| 3427 | ··-·disable_strategy | 3427 | ··-·disable_strategy |
| 3428 | ··-·high_severity | 3428 | ··-·high_severity |
| 3429 | ··-·low_complexity | 3429 | ··-·low_complexity |
| 3430 | ··-·low_disruption | 3430 | ··-·low_disruption |
| 3431 | ··-·no_reboot_needed | 3431 | ··-·no_reboot_needed |
| 3432 | ··-·package_inetutils-telnetd_removed | 3432 | ··-·package_inetutils-telnetd_removed |
| 3433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3438 | include·remove_inetutils-telnetd | ||
| 3439 | class·remove_inetutils-telnetd·{ | ||
| 3440 | ··package·{·'inetutils-telnetd': | ||
| 3441 | ····ensure·=>·'purged', | ||
| 3442 | ··} | ||
| 3443 | } | ||
| 3444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3449 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3438 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3450 | #» ···from·the·system,·and·may·remove·any·packages | 3439 | #» ···from·the·system,·and·may·remove·any·packages |
| 3451 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3440 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3452 | #» ···remediation·AFTER·testing·on·a·non-production | 3441 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3453 | #» ···system! | 3442 | #» ···system! |
| 3454 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3443 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3449 | include·remove_inetutils-telnetd | ||
| 3450 | class·remove_inetutils-telnetd·{ | ||
| 3451 | ··package·{·'inetutils-telnetd': | ||
| 3452 | ····ensure·=>·'purged', | ||
| 3453 | ··} | ||
| 3454 | } | ||
| 3455 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3455 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3456 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. | 3456 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. |
| 3457 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, | 3457 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, |
| 3458 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently | 3458 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently |
| 3459 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. | 3459 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. |
| 3460 | Severity: ·low | 3460 | Severity: ·low |
| 3461 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed | 3461 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed |
| Offset 3474, 39 lines modified | Offset 3474, 39 lines modified | ||
| 3474 | ··tags: | 3474 | ··tags: |
| 3475 | ··-·disable_strategy | 3475 | ··-·disable_strategy |
| 3476 | ··-·low_complexity | 3476 | ··-·low_complexity |
| 3477 | ··-·low_disruption | 3477 | ··-·low_disruption |
| 3478 | ··-·low_severity | 3478 | ··-·low_severity |
| 3479 | ··-·no_reboot_needed | 3479 | ··-·no_reboot_needed |
| 3480 | ··-·package_nis_removed | 3480 | ··-·package_nis_removed |
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3486 | include·remove_nis | ||
| 3487 | class·remove_nis·{ | ||
| 3488 | ··package·{·'nis': | ||
| 3489 | ····ensure·=>·'purged', | ||
| 3490 | ··} | ||
| 3491 | } | ||
| 3492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3497 | #·CAUTION:·This·remediation·script·will·remove·nis | 3486 | #·CAUTION:·This·remediation·script·will·remove·nis |
| 3498 | #» ···from·the·system,·and·may·remove·any·packages | 3487 | #» ···from·the·system,·and·may·remove·any·packages |
| 3499 | #» ···that·depend·on·nis.·Execute·this | 3488 | #» ···that·depend·on·nis.·Execute·this |
| 3500 | #» ···remediation·AFTER·testing·on·a·non-production | 3489 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3501 | #» ···system! | 3490 | #» ···system! |
| 3502 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" | 3491 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" |
| 3492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3497 | include·remove_nis | ||
| 3498 | class·remove_nis·{ | ||
| 3499 | ··package·{·'nis': | ||
| 3500 | ····ensure·=>·'purged', | ||
| 3501 | ··} | ||
| 3502 | } | ||
| 3503 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3503 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3504 | ntpdate·is·a·historical·ntp·synchronization·client·for·unixes.·It·sould·be | 3504 | ntpdate·is·a·historical·ntp·synchronization·client·for·unixes.·It·sould·be |
| 3505 | uninstalled. | 3505 | uninstalled. |
| 3506 | ···········ntpdate·is·an·old·not·security-compliant·ntp·client.·It·should·be | 3506 | ···········ntpdate·is·an·old·not·security-compliant·ntp·client.·It·should·be |
| 3507 | Rationale:·replaced·by·modern·ntp·clients·such·as·ntpd,·able·to·use | 3507 | Rationale:·replaced·by·modern·ntp·clients·such·as·ntpd,·able·to·use |
| 3508 | ···········cryptographic·mechanisms·integrated·in·NTP. | 3508 | ···········cryptographic·mechanisms·integrated·in·NTP. |
| 3509 | Severity: ·low | 3509 | Severity: ·low |
| Offset 3523, 39 lines modified | Offset 3523, 39 lines modified | ||
| 3523 | ··tags: | 3523 | ··tags: |
| 3524 | ··-·disable_strategy | 3524 | ··-·disable_strategy |
| 3525 | ··-·low_complexity | 3525 | ··-·low_complexity |
| 3526 | ··-·low_disruption | 3526 | ··-·low_disruption |
| 3527 | ··-·low_severity | 3527 | ··-·low_severity |
| 3528 | ··-·no_reboot_needed | 3528 | ··-·no_reboot_needed |
| 3529 | ··-·package_ntpdate_removed | 3529 | ··-·package_ntpdate_removed |
| Max diff block lines reached; 8063/13570 bytes (59.42%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 28355, 163 lines modified | Offset 28355, 163 lines modified | ||
| 0006ec20:·7267·6574·3d22·2369·646d·3933·3739·2220··rget="#idm9379"· | 0006ec20:·7267·6574·3d22·2369·646d·3933·3739·2220··rget="#idm9379"· | ||
| 0006ec30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0006ec30:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0006ec40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0006ec40:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0006ec50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0006ec50:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0006ec60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0006ec60:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0006ec70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0006ec70:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0006ec80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0006ec80:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0006ec90:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0006ec90:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0006eca0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0006ecb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0006ecc0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0006ecd0:·2220·6964·3d22·6964·6d39·3337·3922·3e3c··"·id="idm9379">< | |||
| 0006ece0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0006ecf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0006ed00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0006ed10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0006ed20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0006ed30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0006ed40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006ed50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0006ed60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006ed70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0006ed80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0006ed90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006eda0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0006edb0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0006edc0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0006edd0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0006ede0:·6e73·7572·6520·6372·6f6e·2069·7320·696e··nsure·cron·is·in | |||
| 0006edf0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0006ee00:·653a·0a20·2020·206e·616d·653a·2063·726f··e:.····name:·cro | |||
| 0006ee10:·6e0a·2020·2020·7374·6174·653a·2070·7265··n.····state:·pre | |||
| 0006ee20:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0006ee30:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0006ee40:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0006ee50:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0006ee60:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0006ee70:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0006ee80:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0006ee90:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0006eea0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0006eeb0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0006eec0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0006eed0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0006eee0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0006eef0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0006ef00:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0006ef10:·655f·6372·6f6e·5f69·6e73·7461·6c6c·6564··e_cron_installed | |||
| 0006ef20:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0006ef30:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0006ef40:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0006ef50:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0006ef60:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0006ef70:·743d·2223·6964·6d39·3338·3022·2074·6162··t="#idm9380"·tab | |||
| 0006ef80:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0006ef90:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0006efa0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0006efb0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0006efc0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0006efd0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0006e | 0006eca0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 0006ecb0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006ecc0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006ecd0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006ece0:·6964·6d39·3337·3922·3e3c·7072·653e·3c63··idm9379"><pre><c | |||
| 0006ecf0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0006ed00:·5d0a·6e61·6d65·203d·2022·6372·6f6e·220a··].name·=·"cron". | |||
| 0006ed10:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0006ed20:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0006ed30:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0006ed40:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0006ed50:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0006ed60:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0006ed70:·2369·646d·3933·3830·2220·7461·6269·6e64··#idm9380"·tabind | |||
| 0006ed80:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006ed90:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006eda0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006edb0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006edc0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006edd0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0006ede0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0006e | 0006edf0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0006 | 0006ee00:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0006 | 0006ee10:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0006 | 0006ee20:·6964·6d39·3338·3022·3e3c·7461·626c·6520··idm9380"><table· | ||
| 0006 | 0006ee30:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0006 | 0006ee40:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0006 | 0006ee50:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0006 | 0006ee60:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0006 | 0006ee70:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0006 | 0006ee80:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0006 | 0006ee90:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0006 | 0006eea0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0006 | 0006eeb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0006 | 0006eec0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0006 | 0006eed0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0006 | 0006eee0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0006 | 0006eef0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0006 | 0006ef00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0006 | 0006ef10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0006ef20:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0006ef30:·6372·6f6e·2069·7320·696e·7374·616c·6c65··cron·is·installe | |||
| 0006ef40:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0006ef50:·206e·616d·653a·2063·726f·6e0a·2020·2020···name:·cron.···· | |||
| 0006ef60:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0006ef70:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0006ef80:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0006ef90:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0006efa0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0006efb0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| Max diff block lines reached; 199680/221952 bytes (89.97%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 3469, 14 lines modified | Offset 3469, 19 lines modified | ||
| 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3469 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3470 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3471 | ···························SR·2.7,·SR·7.6 | 3471 | ···························SR·2.7,·SR·7.6 |
| 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3472 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3473 | ···························A.14.2.4,·A.9.1.2 | 3473 | ···························A.14.2.4,·A.9.1.2 |
| 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3474 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3475 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3477 | [[packages]] | ||
| 3478 | name·=·"cron" | ||
| 3479 | version·=·"*" | ||
| 3476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3481 | -·name:·Ensure·cron·is·installed | 3485 | -·name:·Ensure·cron·is·installed |
| 3482 | ··package: | 3486 | ··package: |
| Offset 3488, 44 lines modified | Offset 3493, 39 lines modified | ||
| 3488 | ··-·NIST-800-53-CM-6(a) | 3493 | ··-·NIST-800-53-CM-6(a) |
| 3489 | ··-·enable_strategy | 3494 | ··-·enable_strategy |
| 3490 | ··-·low_complexity | 3495 | ··-·low_complexity |
| 3491 | ··-·low_disruption | 3496 | ··-·low_disruption |
| 3492 | ··-·medium_severity | 3497 | ··-·medium_severity |
| 3493 | ··-·no_reboot_needed | 3498 | ··-·no_reboot_needed |
| 3494 | ··-·package_cron_installed | 3499 | ··-·package_cron_installed |
| 3495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3500 | include·install_cron | ||
| 3501 | class·install_cron·{ | ||
| 3502 | ··package·{·'cron': | ||
| 3503 | ····ensure·=>·'installed', | ||
| 3504 | ··} | ||
| 3505 | } | ||
| 3506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3507 | [[packages]] | ||
| 3508 | name·=·"cron" | ||
| 3509 | version·=·"*" | ||
| 3510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3515 | #·Remediation·is·applicable·only·in·certain·platforms | 3505 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3516 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3506 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 3517 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" | 3507 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" |
| 3518 | else | 3508 | else |
| 3519 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3509 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3520 | fi | 3510 | fi |
| 3511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3516 | include·install_cron | ||
| 3517 | class·install_cron·{ | ||
| 3518 | ··package·{·'cron': | ||
| 3519 | ····ensure·=>·'installed', | ||
| 3520 | ··} | ||
| 3521 | } | ||
| 3521 | Group ·Deprecated·services· Group·contains·5·rules | 3522 | Group ·Deprecated·services· Group·contains·5·rules |
| 3522 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security | 3523 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security |
| 3523 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as | 3524 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as |
| 3524 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its | 3525 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its |
| 3525 | old·age,·etc. | 3526 | old·age,·etc. |
| 3526 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3527 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3527 | The·inet-based·telnet·daemon·should·be·uninstalled. | 3528 | The·inet-based·telnet·daemon·should·be·uninstalled. |
| Offset 3568, 39 lines modified | Offset 3568, 39 lines modified | ||
| 3568 | ··-·NIST-800-53-CM-7(b) | 3568 | ··-·NIST-800-53-CM-7(b) |
| 3569 | ··-·disable_strategy | 3569 | ··-·disable_strategy |
| 3570 | ··-·high_severity | 3570 | ··-·high_severity |
| 3571 | ··-·low_complexity | 3571 | ··-·low_complexity |
| 3572 | ··-·low_disruption | 3572 | ··-·low_disruption |
| 3573 | ··-·no_reboot_needed | 3573 | ··-·no_reboot_needed |
| 3574 | ··-·package_inetutils-telnetd_removed | 3574 | ··-·package_inetutils-telnetd_removed |
| 3575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3580 | include·remove_inetutils-telnetd | ||
| 3581 | class·remove_inetutils-telnetd·{ | ||
| 3582 | ··package·{·'inetutils-telnetd': | ||
| 3583 | ····ensure·=>·'purged', | ||
| 3584 | ··} | ||
| 3585 | } | ||
| 3586 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3587 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3588 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3589 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3590 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3591 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3580 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3592 | #» ···from·the·system,·and·may·remove·any·packages | 3581 | #» ···from·the·system,·and·may·remove·any·packages |
| 3593 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3582 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3594 | #» ···remediation·AFTER·testing·on·a·non-production | 3583 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3595 | #» ···system! | 3584 | #» ···system! |
| 3596 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3585 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3586 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3587 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 23069/28841 bytes (79.99%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 20388, 94 lines modified | Offset 20388, 94 lines modified | ||
| 0004fa30:·7267·6574·3d22·2369·646d·3935·3732·2220··rget="#idm9572"· | 0004fa30:·7267·6574·3d22·2369·646d·3935·3732·2220··rget="#idm9572"· | ||
| 0004fa40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004fa40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004fa50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004fa50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004fa60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004fa60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004fa70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004fa70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004fa80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004fa80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004fa90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004fa90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004faa0:·6e20·5 | 0004faa0:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | ||
| 0004fab0:· | 0004fab0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0004fac0:· | 0004fac0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0004fad0:·6 | 0004fad0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0004fae0:· | 0004fae0:·643d·2269·646d·3935·3732·223e·3c74·6162··d="idm9572"><tab | ||
| 0004faf0:·6 | 0004faf0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0004fb00:· | 0004fb00:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0004fb10:· | 0004fb10:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0004fb20:·6 | 0004fb20:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0004fb30:· | 0004fb30:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0004fb40:· | 0004fb40:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0004fb50:· | 0004fb50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0004fb60:· | 0004fb60:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0004fb70:· | 0004fb70:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0004fb80:· | 0004fb80:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0004fb90:· | 0004fb90:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0004fba0:· | 0004fba0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0004fbb0:· | 0004fbb0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0004fbc0:· | 0004fbc0:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | ||
| 0004fbd0:· | 0004fbd0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0004fbe0:·636f·6465·3e0a·2320·4341·5554·494f·4e3a··code>.#·CAUTION: | |||
| 0004fbf0:·2054·6869·7320·7265·6d65·6469·6174·696f···This·remediatio | |||
| 0004fc00:·6e20·7363·7269·7074·2077·696c·6c20·7265··n·script·will·re | |||
| 0004fbe0:·3e3c·636f·6465·3e69·6e63·6c75·6465·2072··><code>include·r | |||
| 0004fbf0:·656d·6f76·655f·696e·6574·7574·696c·732d··emove_inetutils- | |||
| 0004fc00:·7465·6c6e·6574·640a·0a63·6c61·7373·2072··telnetd..class·r | |||
| 0004fc10:·656d·6f76·655f·696e·6574·7574·696c·732d··emove_inetutils- | |||
| 0004fc20:·7465·6c6e·6574·6420·7b0a·2020·7061·636b··telnetd·{.··pack | |||
| 0004fc | 0004fc10:·6d6f·7665·2069·6e65·7475·7469·6c73·2d74··move·inetutils-t | ||
| 0004fc40:·2d74·656c·6e65·7464·273a·0a20·2020·2065··-telnetd':.····e | |||
| 0004fc50:·6e73·7572·6520·3d26·6774·3b20·2770·7572··nsure·=>·'pur | |||
| 0004fc60:·6765·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··ged',.··}.}.</co | |||
| 0004fc70:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0004fc80:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0004fc90:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0004fc | 0004fc20:·656c·6e65·7464·0a23·0920·2020·6672·6f6d··elnetd.#.···from | ||
| 0004fc30:·2074·6865·2073·7973·7465·6d2c·2061·6e64···the·system,·and | |||
| 0004fc40:·206d·6179·2072·656d·6f76·6520·616e·7920···may·remove·any· | |||
| 0004fc50:·7061·636b·6167·6573·0a23·0920·2020·7468··packages.#.···th | |||
| 0004fc60:·6174·2064·6570·656e·6420·6f6e·2069·6e65··at·depend·on·ine | |||
| 0004fc70:·7475·7469·6c73·2d74·656c·6e65·7464·2e20··tutils-telnetd.· | |||
| 0004fc80:·4578·6563·7574·6520·7468·6973·0a23·0920··Execute·this.#.· | |||
| 0004fc90:·2020·7265·6d65·6469·6174·696f·6e20·4146····remediation·AF | |||
| 0004fca0:·5445·5220·7465·7374·696e·6720·6f6e·2061··TER·testing·on·a | |||
| 0004fcb0:·206e·6f6e·2d70·726f·6475·6374·696f·6e0a···non-production. | |||
| 0004fcc0:·2309·2020·2073·7973·7465·6d21·0a0a·4445··#.···system!..DE | |||
| 0004fcd0:·4249·414e·5f46·524f·4e54·454e·443d·6e6f··BIAN_FRONTEND=no | |||
| 0004fce0:·6e69·6e74·6572·6163·7469·7665·2061·7074··ninteractive·apt | |||
| 0004fcf0:·2d67·6574·2072·656d·6f76·6520·2d79·2022··-get·remove·-y·" | |||
| 0004fd00:·696e·6574·7574·696c·732d·7465·6c6e·6574··inetutils-telnet | |||
| 0004fd10:·6422·0a3c·2f63·6f64·653e·3c2f·7072·653e··d".</code></pre> | |||
| 0004fd20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0004fd30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0004f | 0004fd40:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0004fd50:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0004fd60:·6765·743d·2223·6964·6d39·3537·3322·2074··get="#idm9573"·t | |||
| 0004fd70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0004fd80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0004fd90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0004fda0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0004fdb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0004fdc0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0004fdd0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0004fde0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004fdf0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004fe00:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004fe10:·6964·3d22·6964·6d39·3537·3322·3e3c·7461··id="idm9573"><ta | |||
| 0004fe20:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0004fe30:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0004fe40:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0004fe50:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0004fe60:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0004fcc0:·646d·3935·3733·2220·7461·6269·6e64·6578··dm9573"·tabindex | |||
| 0004fcd0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0004fce0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0004fcf0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0004fd00:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0004fd10:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0004fd20:·6d65·6469·6174·696f·6e20·5368·656c·6c20··mediation·Shell· | |||
| 0004fd30:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0004fd40:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0004fd50:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0004fd60:·6c61·7073·6522·2069·643d·2269·646d·3935··lapse"·id="idm95 | |||
| 0004fd70:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 0004fd80:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0004fd90:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0004fda0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0004fdb0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0004fdc0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0004fdd0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004fde0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004f | 0004fe70:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0004fe | 0004fe80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0004fe10:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0004fe20:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0004fe | 0004fe90:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 0004fea0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004feb0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004fe | 0004fec0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | ||
| 0004fed0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004fee0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0004fef0:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 0004ff00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004ff10:·3c63·6f64·653e·696e·636c·7564·6520·7265··<code>include·re | |||
| Max diff block lines reached; 35130/47878 bytes (73.37%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1205, 39 lines modified | Offset 1205, 39 lines modified | ||
| 1205 | ··-·NIST-800-53-CM-7(b) | 1205 | ··-·NIST-800-53-CM-7(b) |
| 1206 | ··-·disable_strategy | 1206 | ··-·disable_strategy |
| 1207 | ··-·high_severity | 1207 | ··-·high_severity |
| 1208 | ··-·low_complexity | 1208 | ··-·low_complexity |
| 1209 | ··-·low_disruption | 1209 | ··-·low_disruption |
| 1210 | ··-·no_reboot_needed | 1210 | ··-·no_reboot_needed |
| 1211 | ··-·package_inetutils-telnetd_removed | 1211 | ··-·package_inetutils-telnetd_removed |
| 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1217 | include·remove_inetutils-telnetd | ||
| 1218 | class·remove_inetutils-telnetd·{ | ||
| 1219 | ··package·{·'inetutils-telnetd': | ||
| 1220 | ····ensure·=>·'purged', | ||
| 1221 | ··} | ||
| 1222 | } | ||
| 1223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1228 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 1217 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 1229 | #» ···from·the·system,·and·may·remove·any·packages | 1218 | #» ···from·the·system,·and·may·remove·any·packages |
| 1230 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 1219 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 1231 | #» ···remediation·AFTER·testing·on·a·non-production | 1220 | #» ···remediation·AFTER·testing·on·a·non-production |
| 1232 | #» ···system! | 1221 | #» ···system! |
| 1233 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 1222 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 1223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1228 | include·remove_inetutils-telnetd | ||
| 1229 | class·remove_inetutils-telnetd·{ | ||
| 1230 | ··package·{·'inetutils-telnetd': | ||
| 1231 | ····ensure·=>·'purged', | ||
| 1232 | ··} | ||
| 1233 | } | ||
| 1234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1235 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. | 1235 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. |
| 1236 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, | 1236 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, |
| 1237 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently | 1237 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently |
| 1238 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. | 1238 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. |
| 1239 | Severity: ·low | 1239 | Severity: ·low |
| 1240 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed | 1240 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed |
| Offset 1253, 39 lines modified | Offset 1253, 39 lines modified | ||
| 1253 | ··tags: | 1253 | ··tags: |
| 1254 | ··-·disable_strategy | 1254 | ··-·disable_strategy |
| 1255 | ··-·low_complexity | 1255 | ··-·low_complexity |
| 1256 | ··-·low_disruption | 1256 | ··-·low_disruption |
| 1257 | ··-·low_severity | 1257 | ··-·low_severity |
| 1258 | ··-·no_reboot_needed | 1258 | ··-·no_reboot_needed |
| 1259 | ··-·package_nis_removed | 1259 | ··-·package_nis_removed |
| 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1265 | include·remove_nis | ||
| 1266 | class·remove_nis·{ | ||
| 1267 | ··package·{·'nis': | ||
| 1268 | ····ensure·=>·'purged', | ||
| 1269 | ··} | ||
| 1270 | } | ||
| 1271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1276 | #·CAUTION:·This·remediation·script·will·remove·nis | 1265 | #·CAUTION:·This·remediation·script·will·remove·nis |
| 1277 | #» ···from·the·system,·and·may·remove·any·packages | 1266 | #» ···from·the·system,·and·may·remove·any·packages |
| 1278 | #» ···that·depend·on·nis.·Execute·this | 1267 | #» ···that·depend·on·nis.·Execute·this |
| 1279 | #» ···remediation·AFTER·testing·on·a·non-production | 1268 | #» ···remediation·AFTER·testing·on·a·non-production |
| 1280 | #» ···system! | 1269 | #» ···system! |
| 1281 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" | 1270 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" |
| 1271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1276 | include·remove_nis | ||
| 1277 | class·remove_nis·{ | ||
| 1278 | ··package·{·'nis': | ||
| 1279 | ····ensure·=>·'purged', | ||
| 1280 | ··} | ||
| 1281 | } | ||
| 1282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·s\x8ss\x8sl\x8l·c\x8co\x8om\x8mp\x8pl\x8li\x8ia\x8an\x8nt\x8t·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·s\x8ss\x8sl\x8l·c\x8co\x8om\x8mp\x8pl\x8li\x8ia\x8an\x8nt\x8t·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1283 | The·telnet·daemon,·even·with·ssl·support,·should·be·uninstalled. | 1283 | The·telnet·daemon,·even·with·ssl·support,·should·be·uninstalled. |
| 1284 | Rationale:··telnet,·even·with·ssl·support,·should·not·be·installed.·When·remote | 1284 | Rationale:··telnet,·even·with·ssl·support,·should·not·be·installed.·When·remote |
| 1285 | ············shell·is·required,·up-to-date·ssh·daemon·can·be·used. | 1285 | ············shell·is·required,·up-to-date·ssh·daemon·can·be·used. |
| 1286 | Severity: ··high | 1286 | Severity: ··high |
| 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_telnetd-ssl_removed | 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_telnetd-ssl_removed |
| 1288 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········11,·12,·14,·15,·3,·8,·9 | 1288 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········11,·12,·14,·15,·3,·8,·9 |
| Offset 1322, 39 lines modified | Offset 1322, 39 lines modified | ||
| 1322 | ··-·NIST-800-53-CM-7(b) | 1322 | ··-·NIST-800-53-CM-7(b) |
| 1323 | ··-·disable_strategy | 1323 | ··-·disable_strategy |
| 1324 | ··-·high_severity | 1324 | ··-·high_severity |
| 1325 | ··-·low_complexity | 1325 | ··-·low_complexity |
| 1326 | ··-·low_disruption | 1326 | ··-·low_disruption |
| 1327 | ··-·no_reboot_needed | 1327 | ··-·no_reboot_needed |
| 1328 | ··-·package_telnetd-ssl_removed | 1328 | ··-·package_telnetd-ssl_removed |
| Max diff block lines reached; 2958/8588 bytes (34.44%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 27977, 163 lines modified | Offset 27977, 163 lines modified | ||
| 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | 0006d480:·612d·7461·7267·6574·3d22·2369·646d·3933··a-target="#idm93 | ||
| 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | 0006d490:·3739·2220·7461·6269·6e64·6578·3d22·3022··79"·tabindex="0" | ||
| 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0006d4a0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0006d4b0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0006d4c0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0006d4d0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0006d4e0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0006d4f0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0006d500:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0006d4f0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0006d500:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0006d510:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0006d520:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0006d530:·6170·7365·2220·6964·3d22·6964·6d39·3337··apse"·id="idm937 | |||
| 0006d540:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0006d550:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0006d560:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0006d570:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0006d580:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0006d590:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0006d5a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006d5b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0006d5c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0006d5d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0006d5e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0006d5f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0006d600:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0006d610:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0006d620:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0006d630:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0006d640:·653a·2045·6e73·7572·6520·6372·6f6e·2069··e:·Ensure·cron·i | |||
| 0006d650:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0006d660:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0006d670:·2063·726f·6e0a·2020·2020·7374·6174·653a···cron.····state: | |||
| 0006d680:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0006d690:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0006d6a0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0006d6b0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0006d6c0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0006d6d0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0006d6e0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0006d6f0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0006d700:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 0006d710:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0006d720:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0006d730:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0006d740:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0006d750:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0006d760:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0006d770:·636b·6167·655f·6372·6f6e·5f69·6e73·7461··ckage_cron_insta | |||
| 0006d780:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0006d790:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006d7a0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0006d7b0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0006d7c0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0006d7d0:·6172·6765·743d·2223·6964·6d39·3338·3022··arget="#idm9380" | |||
| 0006d7e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0006d7f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0006d800:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0006d810:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0006d820:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0006d830:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0006d840:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0006d | 0006d510:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0006d | 0006d520:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0006d | 0006d530:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0006d | 0006d540:·6964·3d22·6964·6d39·3337·3922·3e3c·7072··id="idm9379"><pr | ||
| 0006d890:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0006d8a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0006d8b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0006d8c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0006d8d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0006d8e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0006d8f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006d900:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0006d910:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006d920:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0006d930:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0006d940:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006d950:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0006d960:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0006d970:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0006d980:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 0006d990:·6e73·7461·6c6c·5f63·726f·6e0a·0a63·6c61··nstall_cron..cla | |||
| 0006d9a0:·7373·2069·6e73·7461·6c6c·5f63·726f·6e20··ss·install_cron· | |||
| 0006d9b0:·7b0a·2020·7061·636b·6167·6520·7b20·2763··{.··package·{·'c | |||
| 0006d9c0:·726f·6e27·3a0a·2020·2020·656e·7375·7265··ron':.····ensure | |||
| 0006d9d0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 0006d9e0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 0006d9f0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0006da00:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0006da10:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0006da20:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0006da30:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0006da40:·3933·3831·2220·7461·6269·6e64·6578·3d22··9381"·tabindex=" | |||
| 0006da50:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0006da60:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0006da70:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0006da80:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0006da90:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0006daa0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0006dab0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0006dac0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0006dad0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0006dae0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0006daf0:·2220·6964·3d22·6964·6d39·3338·3122·3e3c··"·id="idm9381">< | |||
| 0006d | 0006d550:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0006d | 0006d560:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | ||
| 0006d | 0006d570:·6f6e·220a·7665·7273·696f·6e20·3d20·222a··on".version·=·"* | ||
| 0006d | 0006d580:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | ||
| 0006d | 0006d590:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| Max diff block lines reached; 199404/221676 bytes (89.95%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3410, 14 lines modified | Offset 3410, 19 lines modified | ||
| 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3410 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3411 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3412 | ···························SR·2.7,·SR·7.6 | 3412 | ···························SR·2.7,·SR·7.6 |
| 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3413 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3414 | ···························A.14.2.4,·A.9.1.2 | 3414 | ···························A.14.2.4,·A.9.1.2 |
| 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3415 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3416 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3418 | [[packages]] | ||
| 3419 | name·=·"cron" | ||
| 3420 | version·=·"*" | ||
| 3417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3422 | -·name:·Ensure·cron·is·installed | 3426 | -·name:·Ensure·cron·is·installed |
| 3423 | ··package: | 3427 | ··package: |
| Offset 3429, 44 lines modified | Offset 3434, 39 lines modified | ||
| 3429 | ··-·NIST-800-53-CM-6(a) | 3434 | ··-·NIST-800-53-CM-6(a) |
| 3430 | ··-·enable_strategy | 3435 | ··-·enable_strategy |
| 3431 | ··-·low_complexity | 3436 | ··-·low_complexity |
| 3432 | ··-·low_disruption | 3437 | ··-·low_disruption |
| 3433 | ··-·medium_severity | 3438 | ··-·medium_severity |
| 3434 | ··-·no_reboot_needed | 3439 | ··-·no_reboot_needed |
| 3435 | ··-·package_cron_installed | 3440 | ··-·package_cron_installed |
| 3436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3441 | include·install_cron | ||
| 3442 | class·install_cron·{ | ||
| 3443 | ··package·{·'cron': | ||
| 3444 | ····ensure·=>·'installed', | ||
| 3445 | ··} | ||
| 3446 | } | ||
| 3447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3448 | [[packages]] | ||
| 3449 | name·=·"cron" | ||
| 3450 | version·=·"*" | ||
| 3451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3456 | #·Remediation·is·applicable·only·in·certain·platforms | 3446 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3457 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3447 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 3458 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" | 3448 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" |
| 3459 | else | 3449 | else |
| 3460 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3450 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3461 | fi | 3451 | fi |
| 3452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3457 | include·install_cron | ||
| 3458 | class·install_cron·{ | ||
| 3459 | ··package·{·'cron': | ||
| 3460 | ····ensure·=>·'installed', | ||
| 3461 | ··} | ||
| 3462 | } | ||
| 3462 | Group ·Deprecated·services· Group·contains·5·rules | 3463 | Group ·Deprecated·services· Group·contains·5·rules |
| 3463 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security | 3464 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security |
| 3464 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as | 3465 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as |
| 3465 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its | 3466 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its |
| 3466 | old·age,·etc. | 3467 | old·age,·etc. |
| 3467 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3468 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3468 | The·inet-based·telnet·daemon·should·be·uninstalled. | 3469 | The·inet-based·telnet·daemon·should·be·uninstalled. |
| Offset 3509, 39 lines modified | Offset 3509, 39 lines modified | ||
| 3509 | ··-·NIST-800-53-CM-7(b) | 3509 | ··-·NIST-800-53-CM-7(b) |
| 3510 | ··-·disable_strategy | 3510 | ··-·disable_strategy |
| 3511 | ··-·high_severity | 3511 | ··-·high_severity |
| 3512 | ··-·low_complexity | 3512 | ··-·low_complexity |
| 3513 | ··-·low_disruption | 3513 | ··-·low_disruption |
| 3514 | ··-·no_reboot_needed | 3514 | ··-·no_reboot_needed |
| 3515 | ··-·package_inetutils-telnetd_removed | 3515 | ··-·package_inetutils-telnetd_removed |
| 3516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3521 | include·remove_inetutils-telnetd | ||
| 3522 | class·remove_inetutils-telnetd·{ | ||
| 3523 | ··package·{·'inetutils-telnetd': | ||
| 3524 | ····ensure·=>·'purged', | ||
| 3525 | ··} | ||
| 3526 | } | ||
| 3527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3529 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3530 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3531 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3532 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3521 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3533 | #» ···from·the·system,·and·may·remove·any·packages | 3522 | #» ···from·the·system,·and·may·remove·any·packages |
| 3534 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3523 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3535 | #» ···remediation·AFTER·testing·on·a·non-production | 3524 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3536 | #» ···system! | 3525 | #» ···system! |
| 3537 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3526 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3527 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3528 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 23069/28829 bytes (80.02%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19700, 165 lines modified | Offset 19700, 165 lines modified | ||
| 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004cf30:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | 0004cf40:·2369·646d·3437·3133·2220·7461·6269·6e64··#idm4713"·tabind | ||
| 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0004cf50:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0004cf60:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0004cf70:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0004cf80:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0004cf90:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0004cfa0:·5265·6d65·6469·6174·696f·6e20·4 | 0004cfa0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0004cfb0:·6 | 0004cfb0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0004cfc0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004cfd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004cfe0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004cff0:·6170·7365·2220·6964·3d22·6964·6d34·3731··apse"·id="idm471 | |||
| 0004d000:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0004d010:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004d020:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004d030:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004d040:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004d050:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004d060:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004d070:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004d080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004d090:·6d34·3731·3422·2074·6162·696e·6465·783d··m4714"·tabindex= | |||
| 0004d0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004d0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004d0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004d0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004d0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004d0f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0004d100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004d110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004d120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004d130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004d140:·3437·3134·223e·3c74·6162·6c65·2063·6c61··4714"><table·cla | |||
| 0004d150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0004d160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0004d170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0004d180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0004d190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0004d1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004d1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0004d1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0004d1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004d1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0004d1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0004d200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0004d210:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0004d220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0004d230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0004d240:·6e61·6d65·3a20·456e·7375·7265·2072·7379··name:·Ensure·rsy | |||
| 0004d250:·736c·6f67·2069·7320·696e·7374·616c·6c65··slog·is·installe | |||
| 0004d260:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0004d270:·206e·616d·653a·2072·7379·736c·6f67·0a20···name:·rsyslog.· | |||
| 0004d280:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0004d290:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0004d2a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0004d2b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0004d2c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0004d2d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0004d2e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0004d2f0:·2020·7461·6773·3a0a·2020·2d20·4e49·5354····tags:.··-·NIST | |||
| 0004d300:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0004d310:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0004d320:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0004d330:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0004d340:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0004d350:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0004d360:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0004d370:·6564·0a20·202d·2070·6163·6b61·6765·5f72··ed.··-·package_r | |||
| 0004d380:·7379·736c·6f67·5f69·6e73·7461·6c6c·6564··syslog_installed | |||
| 0004d390:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004d3a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004d3b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004d3c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004d3d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004d3e0:·743d·2223·6964·6d34·3731·3522·2074·6162··t="#idm4715"·tab | |||
| 0004d3f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004d400:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004d410:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004d420:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004d430:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004d440:·2122·3e52·656d·6564·6961·7469·6f6e·2053··!">Remediation·S | |||
| 0004d450:·6865·6c6c·2073·6372·6970·7420·e287·b23c··hell·script·...< | |||
| 0004 | 0004d460:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0004 | 0004d470:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0004 | 0004d480:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0004 | 0004d490:·6964·6d34·3731·3522·3e3c·7461·626c·6520··idm4715"><table· | ||
| 0004d | 0004d4a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0004d | 0004d4b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0004d | 0004d4c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0004d | 0004d4d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0004d | 0004d4e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0004d | 0004d4f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0004d | 0004d500:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0004d | 0004d510:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0004d520:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004d530:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004d540:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004d550:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004d560:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004d570:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004d580:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004d590:·3e23·2052·656d·6564·6961·7469·6f6e·2069··>#·Remediation·i | |||
| 0004d5a0:·7320·6170·706c·6963·6162·6c65·206f·6e6c··s·applicable·onl | |||
| 0004d5b0:·7920·696e·2063·6572·7461·696e·2070·6c61··y·in·certain·pla | |||
| 0004d5c0:·7466·6f72·6d73·0a69·6620·5b20·2120·2d66··tforms.if·[·!·-f | |||
| 0004d5d0:·202f·2e64·6f63·6b65·7265·6e76·205d·2026···/.dockerenv·]·& | |||
| 0004d5e0:·616d·703b·2661·6d70·3b20·5b20·2120·2d66··amp;&·[·!·-f | |||
| 0004d5f0:·202f·7275·6e2f·2e63·6f6e·7461·696e·6572···/run/.container | |||
| 0004d600:·656e·7620·5d3b·2074·6865·6e0a·0a44·4542··env·];·then..DEB | |||
| 0004d610:·4941·4e5f·4652·4f4e·5445·4e44·3d6e·6f6e··IAN_FRONTEND=non | |||
| Max diff block lines reached; 271524/294072 bytes (92.33%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·16.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:16.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1544, 14 lines modified | Offset 1544, 19 lines modified | ||
| 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1544 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1545 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1546 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1547 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1548 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1549 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1550 | ···························SRG-OS-000480-GPOS-00227 | 1550 | ···························SRG-OS-000480-GPOS-00227 |
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1552 | [[packages]] | ||
| 1553 | name·=·"rsyslog" | ||
| 1554 | version·=·"*" | ||
| 1551 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1552 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1553 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1554 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1555 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1556 | -·name:·Ensure·rsyslog·is·installed | 1560 | -·name:·Ensure·rsyslog·is·installed |
| 1557 | ··package: | 1561 | ··package: |
| Offset 1563, 44 lines modified | Offset 1568, 39 lines modified | ||
| 1563 | ··-·NIST-800-53-CM-6(a) | 1568 | ··-·NIST-800-53-CM-6(a) |
| 1564 | ··-·enable_strategy | 1569 | ··-·enable_strategy |
| 1565 | ··-·low_complexity | 1570 | ··-·low_complexity |
| 1566 | ··-·low_disruption | 1571 | ··-·low_disruption |
| 1567 | ··-·medium_severity | 1572 | ··-·medium_severity |
| 1568 | ··-·no_reboot_needed | 1573 | ··-·no_reboot_needed |
| 1569 | ··-·package_rsyslog_installed | 1574 | ··-·package_rsyslog_installed |
| 1570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1571 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1572 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1573 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1574 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1575 | include·install_rsyslog | ||
| 1576 | class·install_rsyslog·{ | ||
| 1577 | ··package·{·'rsyslog': | ||
| 1578 | ····ensure·=>·'installed', | ||
| 1579 | ··} | ||
| 1580 | } | ||
| 1581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1582 | [[packages]] | ||
| 1583 | name·=·"rsyslog" | ||
| 1584 | version·=·"*" | ||
| 1585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1590 | #·Remediation·is·applicable·only·in·certain·platforms | 1580 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1591 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1581 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1592 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1582 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1593 | else | 1583 | else |
| 1594 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1584 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1595 | fi | 1585 | fi |
| 1586 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1587 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1588 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1589 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1590 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1591 | include·install_rsyslog | ||
| 1592 | class·install_rsyslog·{ | ||
| 1593 | ··package·{·'rsyslog': | ||
| 1594 | ····ensure·=>·'installed', | ||
| 1595 | ··} | ||
| 1596 | } | ||
| 1596 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1597 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1597 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·16.04. | 1598 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·16.04. |
| 1598 | The·rsyslog·service·can·be·enabled·with·the·following·command: | 1599 | The·rsyslog·service·can·be·enabled·with·the·following·command: |
| 1599 | $·sudo·systemctl·enable·rsyslog.service | 1600 | $·sudo·systemctl·enable·rsyslog.service |
| 1600 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1601 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1601 | ············services,·which·are·essential·to·system·administration. | 1602 | ············services,·which·are·essential·to·system·administration. |
| 1602 | Severity: ··medium | 1603 | Severity: ··medium |
| Offset 1618, 14 lines modified | Offset 1618, 18 lines modified | ||
| 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1618 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1619 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1620 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1621 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1622 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1623 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1624 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1626 | [customizations.services] | ||
| 1627 | enabled·=·["rsyslog"] | ||
| 1625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1629 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1630 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1631 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1632 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1630 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1633 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1631 | ··block: | 1634 | ··block: |
| Offset 1649, 31 lines modified | Offset 1653, 14 lines modified | ||
| 1649 | ··-·NIST-800-53-CM-6(a) | 1653 | ··-·NIST-800-53-CM-6(a) |
| 1650 | ··-·enable_strategy | 1654 | ··-·enable_strategy |
| 1651 | ··-·low_complexity | 1655 | ··-·low_complexity |
| 1652 | ··-·low_disruption | 1656 | ··-·low_disruption |
| 1653 | ··-·medium_severity | 1657 | ··-·medium_severity |
| 1654 | ··-·no_reboot_needed | 1658 | ··-·no_reboot_needed |
| 1655 | ··-·service_rsyslog_enabled | 1659 | ··-·service_rsyslog_enabled |
| 1656 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1657 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1658 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1659 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1660 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1661 | include·enable_rsyslog | ||
| 1662 | class·enable_rsyslog·{ | ||
| Max diff block lines reached; 32079/38018 bytes (84.38%) of diff not shown. | |||
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037ce0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037cf0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037d00:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037d10:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037d20:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037d30:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037d40:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037d50:·323 | 00037d50:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d60:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d70:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d80:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d90:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037da0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037db0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037dc0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 28050, 94 lines modified | Offset 28050, 94 lines modified | ||
| 0006d910:·6172·6765·743d·2223·6964·6d31·3132·3235··arget="#idm11225 | 0006d910:·6172·6765·743d·2223·6964·6d31·3132·3235··arget="#idm11225 | ||
| 0006d920:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0006d920:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0006d930:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0006d930:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0006d940:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0006d940:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0006d950:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0006d950:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0006d960:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0006d960:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0006d970:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0006d970:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0006d980:·696f·6e20·5 | 0006d980:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | ||
| 0006d990:· | 0006d990:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0006d9a0:· | 0006d9a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0006d9b0:·6 | 0006d9b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0006d9c0:· | 0006d9c0:·2069·643d·2269·646d·3131·3232·3522·3e3c···id="idm11225">< | ||
| 0006d9d0:· | 0006d9d0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0006d9e0:·6 | 0006d9e0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0006d9f0:· | 0006d9f0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0006da00:· | 0006da00:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0006da10:· | 0006da10:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0006da20:·6 | 0006da20:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0006da30:· | 0006da30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0006da40:· | 0006da40:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0006da50:· | 0006da50:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0006da60:· | 0006da60:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0006da70:· | 0006da70:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0006da80:· | 0006da80:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0006da90:· | 0006da90:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0006daa0:· | 0006daa0:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | ||
| 0006dab0:· | 0006dab0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 0006dac0:·653e·3c63·6f64·653e·0a23·2043·4155·5449··e><code>.#·CAUTI | |||
| 0006dad0:·4f4e·3a20·5468·6973·2072·656d·6564·6961··ON:·This·remedia | |||
| 0006dae0:·7469·6f6e·2073·6372·6970·7420·7769·6c6c··tion·script·will | |||
| 0006daf0:·2072·656d·6f76·6520·696e·6574·7574·696c···remove·inetutil | |||
| 0006dac0:·7072·653e·3c63·6f64·653e·696e·636c·7564··pre><code>includ | |||
| 0006dad0:·6520·7265·6d6f·7665·5f69·6e65·7475·7469··e·remove_inetuti | |||
| 0006dae0:·6c73·2d74·656c·6e65·7464·0a0a·636c·6173··ls-telnetd..clas | |||
| 0006daf0:·7320·7265·6d6f·7665·5f69·6e65·7475·7469··s·remove_inetuti | |||
| 0006db00:·6c73·2d74·656c·6e65·7464·207b·0a20·2070··ls-telnetd·{.··p | |||
| 0006db10:·6163·6b61·6765·207b·2027·696e·6574·7574··ackage·{·'inetut | |||
| 0006db | 0006db00:·732d·7465·6c6e·6574·640a·2309·2020·2066··s-telnetd.#.···f | ||
| 0006db30:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0006db40:·7075·7267·6564·272c·0a20·207d·0a7d·0a3c··purged',.··}.}.< | |||
| 0006db50:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0006db60:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0006db70:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0006db | 0006db10:·726f·6d20·7468·6520·7379·7374·656d·2c20··rom·the·system,· | ||
| 0006db20:·616e·6420·6d61·7920·7265·6d6f·7665·2061··and·may·remove·a | |||
| 0006db30:·6e79·2070·6163·6b61·6765·730a·2309·2020··ny·packages.#.·· | |||
| 0006db40:·2074·6861·7420·6465·7065·6e64·206f·6e20···that·depend·on· | |||
| 0006db50:·696e·6574·7574·696c·732d·7465·6c6e·6574··inetutils-telnet | |||
| 0006db60:·642e·2045·7865·6375·7465·2074·6869·730a··d.·Execute·this. | |||
| 0006db70:·2309·2020·2072·656d·6564·6961·7469·6f6e··#.···remediation | |||
| 0006db80:·2041·4654·4552·2074·6573·7469·6e67·206f···AFTER·testing·o | |||
| 0006db90:·6e20·6120·6e6f·6e2d·7072·6f64·7563·7469··n·a·non-producti | |||
| 0006dba0:·6f6e·0a23·0920·2020·7379·7374·656d·210a··on.#.···system!. | |||
| 0006dbb0:·0a44·4542·4941·4e5f·4652·4f4e·5445·4e44··.DEBIAN_FRONTEND | |||
| 0006dbc0:·3d6e·6f6e·696e·7465·7261·6374·6976·6520··=noninteractive· | |||
| 0006dbd0:·6170·742d·6765·7420·7265·6d6f·7665·202d··apt-get·remove·- | |||
| 0006dbe0:·7920·2269·6e65·7475·7469·6c73·2d74·656c··y·"inetutils-tel | |||
| 0006dbf0:·6e65·7464·220a·3c2f·636f·6465·3e3c·2f70··netd".</code></p | |||
| 0006dc00:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0006dc10:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0006d | 0006dc20:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0006dba0:·2223·6964·6d31·3132·3236·2220·7461·6269··"#idm11226"·tabi | |||
| 0006dbb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0006dbc0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0006dbd0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0006dbe0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0006dbf0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0006dc00:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0006dc10:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | |||
| 0006dc20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0006dc30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0006dc | 0006dc30:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0006dc50:·646d·3131·3232·3622·3e3c·7461·626c·6520··dm11226"><table· | |||
| 0006dc60:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0006dc70:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0006dc80:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0006dc90:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0006dca0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0006dcb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0006dc | 0006dc40:·7461·7267·6574·3d22·2369·646d·3131·3232··target="#idm1122 | ||
| 0006dc50:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | |||
| 0006dc60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0006dc70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0006dc80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0006dc90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0006dca0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0006dcb0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0006dcc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0006dcd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0006dce0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0006dcf0:·7365·2220·6964·3d22·6964·6d31·3132·3236··se"·id="idm11226 | |||
| 0006dd00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0006dd10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0006dd20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0006dd30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0006dd40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0006d | 0006dd50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0006d | 0006dd60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0006dcf0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0006dd | 0006dd70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0006dd80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0006dd | 0006dd90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0006dd | 0006dda0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0006dd | 0006ddb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0006ddc0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0006ddd0:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | |||
| 0006dde0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0006ddf0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0006de00:·6465·2072·656d·6f76·655f·696e·6574·7574··de·remove_inetut | |||
| 0006de10:·696c·732d·7465·6c6e·6574·640a·0a63·6c61··ils-telnetd..cla | |||
| 0006de20:·7373·2072·656d·6f76·655f·696e·6574·7574··ss·remove_inetut | |||
| Max diff block lines reached; 68442/81190 bytes (84.30%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3431, 39 lines modified | Offset 3431, 39 lines modified | ||
| 3431 | ··-·NIST-800-53-CM-7(b) | 3431 | ··-·NIST-800-53-CM-7(b) |
| 3432 | ··-·disable_strategy | 3432 | ··-·disable_strategy |
| 3433 | ··-·high_severity | 3433 | ··-·high_severity |
| 3434 | ··-·low_complexity | 3434 | ··-·low_complexity |
| 3435 | ··-·low_disruption | 3435 | ··-·low_disruption |
| 3436 | ··-·no_reboot_needed | 3436 | ··-·no_reboot_needed |
| 3437 | ··-·package_inetutils-telnetd_removed | 3437 | ··-·package_inetutils-telnetd_removed |
| 3438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3443 | include·remove_inetutils-telnetd | ||
| 3444 | class·remove_inetutils-telnetd·{ | ||
| 3445 | ··package·{·'inetutils-telnetd': | ||
| 3446 | ····ensure·=>·'purged', | ||
| 3447 | ··} | ||
| 3448 | } | ||
| 3449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3454 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3443 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3455 | #» ···from·the·system,·and·may·remove·any·packages | 3444 | #» ···from·the·system,·and·may·remove·any·packages |
| 3456 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3445 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3457 | #» ···remediation·AFTER·testing·on·a·non-production | 3446 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3458 | #» ···system! | 3447 | #» ···system! |
| 3459 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3448 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3454 | include·remove_inetutils-telnetd | ||
| 3455 | class·remove_inetutils-telnetd·{ | ||
| 3456 | ··package·{·'inetutils-telnetd': | ||
| 3457 | ····ensure·=>·'purged', | ||
| 3458 | ··} | ||
| 3459 | } | ||
| 3460 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3460 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3461 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. | 3461 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. |
| 3462 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, | 3462 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, |
| 3463 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently | 3463 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently |
| 3464 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. | 3464 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. |
| 3465 | Severity: ·low | 3465 | Severity: ·low |
| 3466 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed | 3466 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed |
| Offset 3479, 39 lines modified | Offset 3479, 39 lines modified | ||
| 3479 | ··tags: | 3479 | ··tags: |
| 3480 | ··-·disable_strategy | 3480 | ··-·disable_strategy |
| 3481 | ··-·low_complexity | 3481 | ··-·low_complexity |
| 3482 | ··-·low_disruption | 3482 | ··-·low_disruption |
| 3483 | ··-·low_severity | 3483 | ··-·low_severity |
| 3484 | ··-·no_reboot_needed | 3484 | ··-·no_reboot_needed |
| 3485 | ··-·package_nis_removed | 3485 | ··-·package_nis_removed |
| 3486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3491 | include·remove_nis | ||
| 3492 | class·remove_nis·{ | ||
| 3493 | ··package·{·'nis': | ||
| 3494 | ····ensure·=>·'purged', | ||
| 3495 | ··} | ||
| 3496 | } | ||
| 3497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3502 | #·CAUTION:·This·remediation·script·will·remove·nis | 3491 | #·CAUTION:·This·remediation·script·will·remove·nis |
| 3503 | #» ···from·the·system,·and·may·remove·any·packages | 3492 | #» ···from·the·system,·and·may·remove·any·packages |
| 3504 | #» ···that·depend·on·nis.·Execute·this | 3493 | #» ···that·depend·on·nis.·Execute·this |
| 3505 | #» ···remediation·AFTER·testing·on·a·non-production | 3494 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3506 | #» ···system! | 3495 | #» ···system! |
| 3507 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" | 3496 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" |
| 3497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3502 | include·remove_nis | ||
| 3503 | class·remove_nis·{ | ||
| 3504 | ··package·{·'nis': | ||
| 3505 | ····ensure·=>·'purged', | ||
| 3506 | ··} | ||
| 3507 | } | ||
| 3508 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3508 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3509 | ntpdate·is·a·historical·ntp·synchronization·client·for·unixes.·It·sould·be | 3509 | ntpdate·is·a·historical·ntp·synchronization·client·for·unixes.·It·sould·be |
| 3510 | uninstalled. | 3510 | uninstalled. |
| 3511 | ···········ntpdate·is·an·old·not·security-compliant·ntp·client.·It·should·be | 3511 | ···········ntpdate·is·an·old·not·security-compliant·ntp·client.·It·should·be |
| 3512 | Rationale:·replaced·by·modern·ntp·clients·such·as·ntpd,·able·to·use | 3512 | Rationale:·replaced·by·modern·ntp·clients·such·as·ntpd,·able·to·use |
| 3513 | ···········cryptographic·mechanisms·integrated·in·NTP. | 3513 | ···········cryptographic·mechanisms·integrated·in·NTP. |
| 3514 | Severity: ·low | 3514 | Severity: ·low |
| Offset 3528, 39 lines modified | Offset 3528, 39 lines modified | ||
| 3528 | ··tags: | 3528 | ··tags: |
| 3529 | ··-·disable_strategy | 3529 | ··-·disable_strategy |
| 3530 | ··-·low_complexity | 3530 | ··-·low_complexity |
| 3531 | ··-·low_disruption | 3531 | ··-·low_disruption |
| 3532 | ··-·low_severity | 3532 | ··-·low_severity |
| 3533 | ··-·no_reboot_needed | 3533 | ··-·no_reboot_needed |
| 3534 | ··-·package_ntpdate_removed | 3534 | ··-·package_ntpdate_removed |
| Max diff block lines reached; 8063/13570 bytes (59.42%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037cf0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d00:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d10:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d20:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d30:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d40:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d50:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d60:·206f·6620·3230·323 | 00037d60:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037d80:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037d90:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037da0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037db0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037dc0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037dd0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 28387, 163 lines modified | Offset 28387, 163 lines modified | ||
| 0006ee20:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | 0006ee20:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | ||
| 0006ee30:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0006ee30:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0006ee40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0006ee40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0006ee50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0006ee50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0006ee60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0006ee60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0006ee70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0006ee70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0006ee80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0006ee80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0006ee90:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0006eea0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0006eeb0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0006eec0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0006eed0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0006eee0:·643d·2269·646d·3131·3033·3222·3e3c·7072··d="idm11032"><pr | |||
| 0006eef0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0006ef00:·6765·735d·5d0a·6e61·6d65·203d·2022·6372··ges]].name·=·"cr | |||
| 0006ef10:·6f6e·220a·7665·7273·696f·6e20·3d20·222a··on".version·=·"* | |||
| 0006ef20:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0006ef30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0006ef40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0006ef50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0006ef60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0006ef70:·6574·3d22·2369·646d·3131·3033·3322·2074··et="#idm11033"·t | |||
| 0006ef80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0006ef90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0006efa0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0006efb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0006efc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0006efd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0006e | 0006efe0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0006eea0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0006eeb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0006eec0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0006eed0:·7073·6522·2069·643d·2269·646d·3131·3033··pse"·id="idm1103 | |||
| 0006eee0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0006eef0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0006ef00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0006ef10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0006ef20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0006ef30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0006ef40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006ef50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0006ef60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0006ef70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0006ef80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0006ef90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0006efa0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0006efb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0006efc0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0006efd0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0006efe0:·653a·2045·6e73·7572·6520·6372·6f6e·2069··e:·Ensure·cron·i | |||
| 0006eff0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0006f000:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0006f010:·2063·726f·6e0a·2020·2020·7374·6174·653a···cron.····state: | |||
| 0006f020:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0006f030:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0006f040:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0006f050:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0006f060:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0006f070:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0006f080:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0006f090:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0006f0a0:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 0006f0b0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0006f0c0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0006f0d0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0006f0e0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0006f0f0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0006f100:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0006f110:·636b·6167·655f·6372·6f6e·5f69·6e73·7461··ckage_cron_insta | |||
| 0006f120:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0006f130:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006f140:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0006f150:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0006f160:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0006f170:·6172·6765·743d·2223·6964·6d31·3130·3333··arget="#idm11033 | |||
| 0006f180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0006f190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0006f1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0006f1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0006f1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0006f1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0006f1e0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0006 | 0006eff0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0006f | 0006f000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0006f | 0006f010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0006f | 0006f020:·2069·643d·2269·646d·3131·3033·3322·3e3c···id="idm11033">< | ||
| 0006f | 0006f030:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0006f | 0006f040:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0006f | 0006f050:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0006f | 0006f060:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0006f | 0006f070:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0006f | 0006f080:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0006f | 0006f090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0006f | 0006f0a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0006f | 0006f0b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0006f | 0006f0c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0006f | 0006f0d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0006f | 0006f0e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0006f | 0006f0f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0006f | 0006f100:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0006f | 0006f110:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0006f320:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0006f330:·2069·6e73·7461·6c6c·5f63·726f·6e0a·0a63···install_cron..c | |||
| 0006f340:·6c61·7373·2069·6e73·7461·6c6c·5f63·726f··lass·install_cro | |||
| 0006f350:·6e20·7b0a·2020·7061·636b·6167·6520·7b20··n·{.··package·{· | |||
| 0006f360:·2763·726f·6e27·3a0a·2020·2020·656e·7375··'cron':.····ensu | |||
| 0006f370:·7265·203d·2667·743b·2027·696e·7374·616c··re·=>·'instal | |||
| 0006f380:·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f·636f··led',.··}.}.</co | |||
| 0006f | 0006f120:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | ||
| 0006f130:·6e73·7572·6520·6372·6f6e·2069·7320·696e··nsure·cron·is·in | |||
| 0006f140:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| Max diff block lines reached; 199680/221952 bytes (89.97%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 3474, 14 lines modified | Offset 3474, 19 lines modified | ||
| 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3474 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3475 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3476 | ···························SR·2.7,·SR·7.6 | 3476 | ···························SR·2.7,·SR·7.6 |
| 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3477 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3478 | ···························A.14.2.4,·A.9.1.2 | 3478 | ···························A.14.2.4,·A.9.1.2 |
| 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3479 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3480 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3482 | [[packages]] | ||
| 3483 | name·=·"cron" | ||
| 3484 | version·=·"*" | ||
| 3481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3486 | -·name:·Ensure·cron·is·installed | 3490 | -·name:·Ensure·cron·is·installed |
| 3487 | ··package: | 3491 | ··package: |
| Offset 3493, 44 lines modified | Offset 3498, 39 lines modified | ||
| 3493 | ··-·NIST-800-53-CM-6(a) | 3498 | ··-·NIST-800-53-CM-6(a) |
| 3494 | ··-·enable_strategy | 3499 | ··-·enable_strategy |
| 3495 | ··-·low_complexity | 3500 | ··-·low_complexity |
| 3496 | ··-·low_disruption | 3501 | ··-·low_disruption |
| 3497 | ··-·medium_severity | 3502 | ··-·medium_severity |
| 3498 | ··-·no_reboot_needed | 3503 | ··-·no_reboot_needed |
| 3499 | ··-·package_cron_installed | 3504 | ··-·package_cron_installed |
| 3500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3505 | include·install_cron | ||
| 3506 | class·install_cron·{ | ||
| 3507 | ··package·{·'cron': | ||
| 3508 | ····ensure·=>·'installed', | ||
| 3509 | ··} | ||
| 3510 | } | ||
| 3511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3512 | [[packages]] | ||
| 3513 | name·=·"cron" | ||
| 3514 | version·=·"*" | ||
| 3515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3516 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3517 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3518 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3519 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3520 | #·Remediation·is·applicable·only·in·certain·platforms | 3510 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3521 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3511 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 3522 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" | 3512 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" |
| 3523 | else | 3513 | else |
| 3524 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3514 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3525 | fi | 3515 | fi |
| 3516 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3517 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3518 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3519 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3520 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3521 | include·install_cron | ||
| 3522 | class·install_cron·{ | ||
| 3523 | ··package·{·'cron': | ||
| 3524 | ····ensure·=>·'installed', | ||
| 3525 | ··} | ||
| 3526 | } | ||
| 3526 | Group ·Deprecated·services· Group·contains·5·rules | 3527 | Group ·Deprecated·services· Group·contains·5·rules |
| 3527 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security | 3528 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security |
| 3528 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as | 3529 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as |
| 3529 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its | 3530 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its |
| 3530 | old·age,·etc. | 3531 | old·age,·etc. |
| 3531 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3532 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3532 | The·inet-based·telnet·daemon·should·be·uninstalled. | 3533 | The·inet-based·telnet·daemon·should·be·uninstalled. |
| Offset 3573, 39 lines modified | Offset 3573, 39 lines modified | ||
| 3573 | ··-·NIST-800-53-CM-7(b) | 3573 | ··-·NIST-800-53-CM-7(b) |
| 3574 | ··-·disable_strategy | 3574 | ··-·disable_strategy |
| 3575 | ··-·high_severity | 3575 | ··-·high_severity |
| 3576 | ··-·low_complexity | 3576 | ··-·low_complexity |
| 3577 | ··-·low_disruption | 3577 | ··-·low_disruption |
| 3578 | ··-·no_reboot_needed | 3578 | ··-·no_reboot_needed |
| 3579 | ··-·package_inetutils-telnetd_removed | 3579 | ··-·package_inetutils-telnetd_removed |
| 3580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3585 | include·remove_inetutils-telnetd | ||
| 3586 | class·remove_inetutils-telnetd·{ | ||
| 3587 | ··package·{·'inetutils-telnetd': | ||
| 3588 | ····ensure·=>·'purged', | ||
| 3589 | ··} | ||
| 3590 | } | ||
| 3591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3596 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3585 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3597 | #» ···from·the·system,·and·may·remove·any·packages | 3586 | #» ···from·the·system,·and·may·remove·any·packages |
| 3598 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3587 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3599 | #» ···remediation·AFTER·testing·on·a·non-production | 3588 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3600 | #» ···system! | 3589 | #» ···system! |
| 3601 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3590 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 23069/28841 bytes (79.99%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 20388, 95 lines modified | Offset 20388, 95 lines modified | ||
| 0004fa30:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 0004fa30:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 0004fa40:·3232·3522·2074·6162·696e·6465·783d·2230··225"·tabindex="0 | 0004fa40:·3232·3522·2074·6162·696e·6465·783d·2230··225"·tabindex="0 | ||
| 0004fa50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0004fa50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0004fa60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0004fa60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0004fa70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0004fa70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0004fa80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0004fa80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0004fa90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0004fa90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0004faa0:·6961·7469·6f6e·205 | 0004faa0:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | ||
| 0004fab0:·6970·7 | 0004fab0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | ||
| 0004fac0:· | 0004fac0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0004fad0:· | 0004fad0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0004fae0:· | 0004fae0:·7365·2220·6964·3d22·6964·6d31·3132·3235··se"·id="idm11225 | ||
| 0004faf0:· | 0004faf0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004fb00:· | 0004fb00:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004fb10:·7 | 0004fb10:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004fb20:·65 | 0004fb20:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004fb30:·6 | 0004fb30:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004fb40:·6 | 0004fb40:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004fb50:·6 | 0004fb50:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0004fb60:· | 0004fb60:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0004fb70:· | 0004fb70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004fb80:· | 0004fb80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0004fb90:· | 0004fb90:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0004fba0:·6 | 0004fba0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0004fbb0:· | 0004fbb0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0004fbc0:· | 0004fbc0:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | ||
| 0004fbd0:· | 0004fbd0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0004fbe0:· | 0004fbe0:·3c70·7265·3e3c·636f·6465·3e0a·2320·4341··<pre><code>.#·CA | ||
| 0004fbf0:·5554·494f·4e3a·2054·6869·7320·7265·6d65··UTION:·This·reme | |||
| 0004fc00:·6469·6174·696f·6e20·7363·7269·7074·2077··diation·script·w | |||
| 0004fc10:·696c·6c20·7265·6d6f·7665·2069·6e65·7475··ill·remove·inetu | |||
| 0004fbf0:·6c75·6465·2072·656d·6f76·655f·696e·6574··lude·remove_inet | |||
| 0004fc00:·7574·696c·732d·7465·6c6e·6574·640a·0a63··utils-telnetd..c | |||
| 0004fc10:·6c61·7373·2072·656d·6f76·655f·696e·6574··lass·remove_inet | |||
| 0004fc20:·7574·696c·732d·7465·6c6e·6574·6420·7b0a··utils-telnetd·{. | |||
| 0004fc30:·2020·7061·636b·6167·6520·7b20·2769·6e65····package·{·'ine | |||
| 0004fc | 0004fc20:·7469·6c73·2d74·656c·6e65·7464·0a23·0920··tils-telnetd.#.· | ||
| 0004fc50:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0004fc60:·3b20·2770·7572·6765·6427·2c0a·2020·7d0a··;·'purged',.··}. | |||
| 0004fc70:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0004fc80:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0004fc90:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0004fc | 0004fc30:·2020·6672·6f6d·2074·6865·2073·7973·7465····from·the·syste | ||
| 0004fc40:·6d2c·2061·6e64·206d·6179·2072·656d·6f76··m,·and·may·remov | |||
| 0004fc50:·6520·616e·7920·7061·636b·6167·6573·0a23··e·any·packages.# | |||
| 0004fc60:·0920·2020·7468·6174·2064·6570·656e·6420··.···that·depend· | |||
| 0004fc70:·6f6e·2069·6e65·7475·7469·6c73·2d74·656c··on·inetutils-tel | |||
| 0004fc80:·6e65·7464·2e20·4578·6563·7574·6520·7468··netd.·Execute·th | |||
| 0004fc90:·6973·0a23·0920·2020·7265·6d65·6469·6174··is.#.···remediat | |||
| 0004fca0:·696f·6e20·4146·5445·5220·7465·7374·696e··ion·AFTER·testin | |||
| 0004fcb0:·6720·6f6e·2061·206e·6f6e·2d70·726f·6475··g·on·a·non-produ | |||
| 0004fcc0:·6374·696f·6e0a·2309·2020·2073·7973·7465··ction.#.···syste | |||
| 0004fcd0:·6d21·0a0a·4445·4249·414e·5f46·524f·4e54··m!..DEBIAN_FRONT | |||
| 0004fce0:·454e·443d·6e6f·6e69·6e74·6572·6163·7469··END=noninteracti | |||
| 0004fcf0:·7665·2061·7074·2d67·6574·2072·656d·6f76··ve·apt-get·remov | |||
| 0004fd00:·6520·2d79·2022·696e·6574·7574·696c·732d··e·-y·"inetutils- | |||
| 0004fd10:·7465·6c6e·6574·6422·0a3c·2f63·6f64·653e··telnetd".</code> | |||
| 0004fd20:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0004fd30:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0004f | 0004fd40:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 0004fcc0:·6574·3d22·2369·646d·3131·3232·3622·2074··et="#idm11226"·t | |||
| 0004fcd0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0004fce0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0004fcf0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0004fd00:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0004fd10:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0004fd20:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0004fd30:·2053·6865·6c6c·2073·6372·6970·7420·e287···Shell·script·.. | |||
| 0004fd40:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0004fd50:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0004fd | 0004fd50:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0004fd70:·3d22·6964·6d31·3132·3236·223e·3c74·6162··="idm11226"><tab | |||
| 0004fd80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004fd90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004fda0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004fdb0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004fdc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004fd | 0004fd60:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0004fd70:·3132·3236·2220·7461·6269·6e64·6578·3d22··1226"·tabindex=" | |||
| 0004fd80:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004fd90:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004fda0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004fdb0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004fdc0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004fdd0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0004fde0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004fdf0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0004fe00:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0004fe10:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 0004fe20:·3232·3622·3e3c·7461·626c·6520·636c·6173··226"><table·clas | |||
| 0004fe30:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0004fe40:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0004fe50:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0004f | 0004fe60:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0004f | 0004fe70:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0004fe | 0004fe80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0004fe10:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004fe | 0004fe90:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0004fea0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0004fe | 0004feb0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004fe | 0004fec0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004fe | 0004fed0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0004fee0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0004fef0:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 0004ff00:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0004ff10:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0004ff20:·636c·7564·6520·7265·6d6f·7665·5f69·6e65··clude·remove_ine | |||
| 0004ff30:·7475·7469·6c73·2d74·656c·6e65·7464·0a0a··tutils-telnetd.. | |||
| 0004ff40:·636c·6173·7320·7265·6d6f·7665·5f69·6e65··class·remove_ine | |||
| 0004fe60:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0004fe70:·636f·6465·3e0a·2320·4341·5554·494f·4e3a··code>.#·CAUTION: | |||
| Max diff block lines reached; 35268/48154 bytes (73.24%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 40 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 47 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 48 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ·········2.·_\x8D_\x8e_\x8p_\x8r_\x8e_\x8c_\x8a_\x8t_\x8e_\x8d_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1205, 39 lines modified | Offset 1205, 39 lines modified | ||
| 1205 | ··-·NIST-800-53-CM-7(b) | 1205 | ··-·NIST-800-53-CM-7(b) |
| 1206 | ··-·disable_strategy | 1206 | ··-·disable_strategy |
| 1207 | ··-·high_severity | 1207 | ··-·high_severity |
| 1208 | ··-·low_complexity | 1208 | ··-·low_complexity |
| 1209 | ··-·low_disruption | 1209 | ··-·low_disruption |
| 1210 | ··-·no_reboot_needed | 1210 | ··-·no_reboot_needed |
| 1211 | ··-·package_inetutils-telnetd_removed | 1211 | ··-·package_inetutils-telnetd_removed |
| 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1217 | include·remove_inetutils-telnetd | ||
| 1218 | class·remove_inetutils-telnetd·{ | ||
| 1219 | ··package·{·'inetutils-telnetd': | ||
| 1220 | ····ensure·=>·'purged', | ||
| 1221 | ··} | ||
| 1222 | } | ||
| 1223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1228 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 1217 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 1229 | #» ···from·the·system,·and·may·remove·any·packages | 1218 | #» ···from·the·system,·and·may·remove·any·packages |
| 1230 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 1219 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 1231 | #» ···remediation·AFTER·testing·on·a·non-production | 1220 | #» ···remediation·AFTER·testing·on·a·non-production |
| 1232 | #» ···system! | 1221 | #» ···system! |
| 1233 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 1222 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 1223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1228 | include·remove_inetutils-telnetd | ||
| 1229 | class·remove_inetutils-telnetd·{ | ||
| 1230 | ··package·{·'inetutils-telnetd': | ||
| 1231 | ····ensure·=>·'purged', | ||
| 1232 | ··} | ||
| 1233 | } | ||
| 1234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1234 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·n\x8ni\x8is\x8s·p\x8pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1235 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. | 1235 | The·support·for·Yellowpages·should·not·be·installed·unless·it·is·required. |
| 1236 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, | 1236 | ···········NIS·is·the·historical·SUN·service·for·central·account·management, |
| 1237 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently | 1237 | Rationale:·more·and·more·replaced·by·LDAP.·NIS·does·not·support·efficiently |
| 1238 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. | 1238 | ···········security·constraints,·ACL,·etc.·and·should·not·be·used. |
| 1239 | Severity: ·low | 1239 | Severity: ·low |
| 1240 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed | 1240 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_nis_removed |
| Offset 1253, 39 lines modified | Offset 1253, 39 lines modified | ||
| 1253 | ··tags: | 1253 | ··tags: |
| 1254 | ··-·disable_strategy | 1254 | ··-·disable_strategy |
| 1255 | ··-·low_complexity | 1255 | ··-·low_complexity |
| 1256 | ··-·low_disruption | 1256 | ··-·low_disruption |
| 1257 | ··-·low_severity | 1257 | ··-·low_severity |
| 1258 | ··-·no_reboot_needed | 1258 | ··-·no_reboot_needed |
| 1259 | ··-·package_nis_removed | 1259 | ··-·package_nis_removed |
| 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1265 | include·remove_nis | ||
| 1266 | class·remove_nis·{ | ||
| 1267 | ··package·{·'nis': | ||
| 1268 | ····ensure·=>·'purged', | ||
| 1269 | ··} | ||
| 1270 | } | ||
| 1271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1260 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1261 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1262 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1263 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1264 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1276 | #·CAUTION:·This·remediation·script·will·remove·nis | 1265 | #·CAUTION:·This·remediation·script·will·remove·nis |
| 1277 | #» ···from·the·system,·and·may·remove·any·packages | 1266 | #» ···from·the·system,·and·may·remove·any·packages |
| 1278 | #» ···that·depend·on·nis.·Execute·this | 1267 | #» ···that·depend·on·nis.·Execute·this |
| 1279 | #» ···remediation·AFTER·testing·on·a·non-production | 1268 | #» ···remediation·AFTER·testing·on·a·non-production |
| 1280 | #» ···system! | 1269 | #» ···system! |
| 1281 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" | 1270 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"nis" |
| 1271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 1276 | include·remove_nis | ||
| 1277 | class·remove_nis·{ | ||
| 1278 | ··package·{·'nis': | ||
| 1279 | ····ensure·=>·'purged', | ||
| 1280 | ··} | ||
| 1281 | } | ||
| 1282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·s\x8ss\x8sl\x8l·c\x8co\x8om\x8mp\x8pl\x8li\x8ia\x8an\x8nt\x8t·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1282 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·s\x8ss\x8sl\x8l·c\x8co\x8om\x8mp\x8pl\x8li\x8ia\x8an\x8nt\x8t·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1283 | The·telnet·daemon,·even·with·ssl·support,·should·be·uninstalled. | 1283 | The·telnet·daemon,·even·with·ssl·support,·should·be·uninstalled. |
| 1284 | Rationale:··telnet,·even·with·ssl·support,·should·not·be·installed.·When·remote | 1284 | Rationale:··telnet,·even·with·ssl·support,·should·not·be·installed.·When·remote |
| 1285 | ············shell·is·required,·up-to-date·ssh·daemon·can·be·used. | 1285 | ············shell·is·required,·up-to-date·ssh·daemon·can·be·used. |
| 1286 | Severity: ··high | 1286 | Severity: ··high |
| 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_telnetd-ssl_removed | 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_telnetd-ssl_removed |
| 1288 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········11,·12,·14,·15,·3,·8,·9 | 1288 | ············_\x8c_\x8i_\x8s_\x8-_\x8c_\x8s_\x8c········11,·12,·14,·15,·3,·8,·9 |
| Offset 1322, 39 lines modified | Offset 1322, 39 lines modified | ||
| 1322 | ··-·NIST-800-53-CM-7(b) | 1322 | ··-·NIST-800-53-CM-7(b) |
| 1323 | ··-·disable_strategy | 1323 | ··-·disable_strategy |
| 1324 | ··-·high_severity | 1324 | ··-·high_severity |
| 1325 | ··-·low_complexity | 1325 | ··-·low_complexity |
| 1326 | ··-·low_disruption | 1326 | ··-·low_disruption |
| 1327 | ··-·no_reboot_needed | 1327 | ··-·no_reboot_needed |
| 1328 | ··-·package_telnetd-ssl_removed | 1328 | ··-·package_telnetd-ssl_removed |
| Max diff block lines reached; 2958/8588 bytes (34.44%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037cc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ce0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cf0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d30:·6173·206f·6620·3230·323 | 00037d30:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037da0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 28009, 164 lines modified | Offset 28009, 164 lines modified | ||
| 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0006d680:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | 0006d690:·3131·3033·3222·2074·6162·696e·6465·783d··11032"·tabindex= | ||
| 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0006d6a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0006d6b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0006d6c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0006d6d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0006d6e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0006d6f0:·6564·6961·7469·6f6e·204 | 0006d6f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0006d700:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0006d710:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0006d720:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0006d730:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0006d740:·6522·2069·643d·2269·646d·3131·3033·3222··e"·id="idm11032" | |||
| 0006d750:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0006d760:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0006d770:·2022·6372·6f6e·220a·7665·7273·696f·6e20···"cron".version· | |||
| 0006d780:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0006d790:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0006d7a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0006d7b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0006d7c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0006d7d0:·7461·7267·6574·3d22·2369·646d·3131·3033··target="#idm1103 | |||
| 0006d7e0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0006d7f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0006d800:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0006d810:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0006d820:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0006d830:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0006d840:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0006d850:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0006d860:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0006d870:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0006d880:·7073·6522·2069·643d·2269·646d·3131·3033··pse"·id="idm1103 | |||
| 0006d890:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0006d8a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0006d8b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0006d8c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0006d8d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0006d8e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0006d8f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006d900:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0006d910:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0006d920:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0006d930:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0006d940:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0006d950:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0006d960:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0006d970:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0006d980:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0006d990:·653a·2045·6e73·7572·6520·6372·6f6e·2069··e:·Ensure·cron·i | |||
| 0006d9a0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0006d9b0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0006d9c0:·2063·726f·6e0a·2020·2020·7374·6174·653a···cron.····state: | |||
| 0006d9d0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0006d9e0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0006d9f0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0006da00:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0006da10:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0006da20:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0006da30:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0006da40:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0006da50:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 0006da60:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0006da70:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0006da80:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0006da90:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0006daa0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0006dab0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0006dac0:·636b·6167·655f·6372·6f6e·5f69·6e73·7461··ckage_cron_insta | |||
| 0006dad0:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0006dae0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0006daf0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0006db00:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0006db10:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0006db20:·6172·6765·743d·2223·6964·6d31·3130·3334··arget="#idm11034 | |||
| 0006db30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0006db40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0006db50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0006db60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0006db70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0006db80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0006db90:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 0006dba0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0006dbb0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0006dbc0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0006dbd0:·2069·643d·2269·646d·3131·3033·3422·3e3c···id="idm11034">< | |||
| 0006dbe0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0006dbf0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0006dc00:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0006dc10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0006dc20:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0006dc30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0006dc40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006dc50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0006dc60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0006dc70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0006dc80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0006dc90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0006dca0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0006dcb0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0006dcc0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0006dcd0:·3e3c·636f·6465·3e23·2052·656d·6564·6961··><code>#·Remedia | |||
| 0006dce0:·7469·6f6e·2069·7320·6170·706c·6963·6162··tion·is·applicab | |||
| 0006dcf0:·6c65·206f·6e6c·7920·696e·2063·6572·7461··le·only·in·certa | |||
| 0006dd00:·696e·2070·6c61·7466·6f72·6d73·0a69·6620··in·platforms.if· | |||
| 0006dd10:·5b20·2120·2d66·202f·2e64·6f63·6b65·7265··[·!·-f·/.dockere | |||
| 0006dd20:·6e76·205d·2026·616d·703b·2661·6d70·3b20··nv·]·&&· | |||
| 0006dd30:·5b20·2120·2d66·202f·7275·6e2f·2e63·6f6e··[·!·-f·/run/.con | |||
| 0006dd40:·7461·696e·6572·656e·7620·5d3b·2074·6865··tainerenv·];·the | |||
| 0006dd50:·6e0a·0a44·4542·4941·4e5f·4652·4f4e·5445··n..DEBIAN_FRONTE | |||
| 0006dd60:·4e44·3d6e·6f6e·696e·7465·7261·6374·6976··ND=noninteractiv | |||
| Max diff block lines reached; 199542/221952 bytes (89.90%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 3415, 14 lines modified | Offset 3415, 19 lines modified | ||
| 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR | 3415 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR |
| 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, | 3416 | ···························1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6, |
| 3417 | ···························SR·2.7,·SR·7.6 | 3417 | ···························SR·2.7,·SR·7.6 |
| 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, | 3418 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3, |
| 3419 | ···························A.14.2.4,·A.9.1.2 | 3419 | ···························A.14.2.4,·A.9.1.2 |
| 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3420 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 3421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3423 | [[packages]] | ||
| 3424 | name·=·"cron" | ||
| 3425 | version·=·"*" | ||
| 3422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3427 | -·name:·Ensure·cron·is·installed | 3431 | -·name:·Ensure·cron·is·installed |
| 3428 | ··package: | 3432 | ··package: |
| Offset 3434, 44 lines modified | Offset 3439, 39 lines modified | ||
| 3434 | ··-·NIST-800-53-CM-6(a) | 3439 | ··-·NIST-800-53-CM-6(a) |
| 3435 | ··-·enable_strategy | 3440 | ··-·enable_strategy |
| 3436 | ··-·low_complexity | 3441 | ··-·low_complexity |
| 3437 | ··-·low_disruption | 3442 | ··-·low_disruption |
| 3438 | ··-·medium_severity | 3443 | ··-·medium_severity |
| 3439 | ··-·no_reboot_needed | 3444 | ··-·no_reboot_needed |
| 3440 | ··-·package_cron_installed | 3445 | ··-·package_cron_installed |
| 3441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3446 | include·install_cron | ||
| 3447 | class·install_cron·{ | ||
| 3448 | ··package·{·'cron': | ||
| 3449 | ····ensure·=>·'installed', | ||
| 3450 | ··} | ||
| 3451 | } | ||
| 3452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3453 | [[packages]] | ||
| 3454 | name·=·"cron" | ||
| 3455 | version·=·"*" | ||
| 3456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3461 | #·Remediation·is·applicable·only·in·certain·platforms | 3451 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3462 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3452 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 3463 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" | 3453 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"cron" |
| 3464 | else | 3454 | else |
| 3465 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3455 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3466 | fi | 3456 | fi |
| 3457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3462 | include·install_cron | ||
| 3463 | class·install_cron·{ | ||
| 3464 | ··package·{·'cron': | ||
| 3465 | ····ensure·=>·'installed', | ||
| 3466 | ··} | ||
| 3467 | } | ||
| 3467 | Group ·Deprecated·services· Group·contains·5·rules | 3468 | Group ·Deprecated·services· Group·contains·5·rules |
| 3468 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security | 3469 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Some·deprecated·software·services·impact·the·overall·system·security |
| 3469 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as | 3470 | due·to·their·behavior·(leak·of·confidentiality·in·network·exchange,·usage·as |
| 3470 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its | 3471 | uncontrolled·communication·channel,·risk·associated·with·the·service·due·to·its |
| 3471 | old·age,·etc. | 3472 | old·age,·etc. |
| 3472 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·U\x8Un\x8ni\x8in\x8ns\x8st\x8ta\x8al\x8ll\x8l·t\x8th\x8he\x8e·i\x8in\x8ne\x8et\x8t-\x8-b\x8ba\x8as\x8se\x8ed\x8d·t\x8te\x8el\x8ln\x8ne\x8et\x8t·s\x8se\x8er\x8rv\x8ve\x8er\x8r·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3473 | The·inet-based·telnet·daemon·should·be·uninstalled. | 3474 | The·inet-based·telnet·daemon·should·be·uninstalled. |
| Offset 3514, 39 lines modified | Offset 3514, 39 lines modified | ||
| 3514 | ··-·NIST-800-53-CM-7(b) | 3514 | ··-·NIST-800-53-CM-7(b) |
| 3515 | ··-·disable_strategy | 3515 | ··-·disable_strategy |
| 3516 | ··-·high_severity | 3516 | ··-·high_severity |
| 3517 | ··-·low_complexity | 3517 | ··-·low_complexity |
| 3518 | ··-·low_disruption | 3518 | ··-·low_disruption |
| 3519 | ··-·no_reboot_needed | 3519 | ··-·no_reboot_needed |
| 3520 | ··-·package_inetutils-telnetd_removed | 3520 | ··-·package_inetutils-telnetd_removed |
| 3521 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3522 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3523 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3524 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3525 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 3526 | include·remove_inetutils-telnetd | ||
| 3527 | class·remove_inetutils-telnetd·{ | ||
| 3528 | ··package·{·'inetutils-telnetd': | ||
| 3529 | ····ensure·=>·'purged', | ||
| 3530 | ··} | ||
| 3531 | } | ||
| 3532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3521 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3522 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3534 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3523 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3535 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3524 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3536 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3525 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3537 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd | 3526 | #·CAUTION:·This·remediation·script·will·remove·inetutils-telnetd |
| 3538 | #» ···from·the·system,·and·may·remove·any·packages | 3527 | #» ···from·the·system,·and·may·remove·any·packages |
| 3539 | #» ···that·depend·on·inetutils-telnetd.·Execute·this | 3528 | #» ···that·depend·on·inetutils-telnetd.·Execute·this |
| 3540 | #» ···remediation·AFTER·testing·on·a·non-production | 3529 | #» ···remediation·AFTER·testing·on·a·non-production |
| 3541 | #» ···system! | 3530 | #» ···system! |
| 3542 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" | 3531 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"inetutils-telnetd" |
| 3532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 23069/28829 bytes (80.02%) of diff not shown. | |||
| Offset 14282, 16 lines modified | Offset 14282, 16 lines modified | ||
| 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c90:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ca0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037cb0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037cc0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037cd0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ce0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cf0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d00:·2028·6173·206f·6620·3230·323 | 00037d00:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037d10:·323 | 00037d10:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037d20:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037d30:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d40:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d50:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d60:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d70:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d80:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 51394, 253 lines modified | Offset 51394, 253 lines modified | ||
| 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 000c8c10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | 000c8c20:·3135·3130·3222·2074·6162·696e·6465·783d··15102"·tabindex= | ||
| 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 000c8c30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 000c8c40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 000c8c50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 000c8c60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 000c8c70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000c8c80:·6564·6961·7469·6f6e·204 | 000c8c80:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 000c8c90:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 000c8ca0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000c8cb0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000c8cc0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000c8cd0:·6522·2069·643d·2269·646d·3135·3130·3222··e"·id="idm15102" | |||
| 000c8ce0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 000c8cf0:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 000c8d00:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 000c8d10:·205b·2261·7564·6974·6422·5d0a·3c2f·636f···["auditd"].</co | |||
| 000c8c90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000c8ca0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000c8cb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000c8cc0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000c8cd0:·3135·3130·3222·3e3c·7461·626c·6520·636c··15102"><table·cl | |||
| 000c8ce0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000c8cf0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000c8d00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000c8d10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000c8d20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000c8d30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000c8d40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000c8d50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000c8d60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000c8d70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000c8d80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000c8d90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000c8da0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000c8db0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 000c8dc0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 000c8dd0:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 000c8de0:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 000c8df0:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 000c8e00:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 000c8e10:·746f·0a20·2074·6167·733a·0a20·202d·2043··to.··tags:.··-·C | |||
| 000c8e20:·4a49·532d·352e·342e·312e·310a·2020·2d20··JIS-5.4.1.1.··-· | |||
| 000c8e30:·4e49·5354·2d38·3030·2d31·3731·2d33·2e33··NIST-800-171-3.3 | |||
| 000c8e40:·2e31·0a20·202d·204e·4953·542d·3830·302d··.1.··-·NIST-800- | |||
| 000c8e50:·3137·312d·332e·332e·320a·2020·2d20·4e49··171-3.3.2.··-·NI | |||
| 000c8e60:·5354·2d38·3030·2d31·3731·2d33·2e33·2e36··ST-800-171-3.3.6 | |||
| 000c8e70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8e80:·2d41·432d·3228·6729·0a20·202d·204e·4953··-AC-2(g).··-·NIS | |||
| 000c8e90:·542d·3830·302d·3533·2d41·432d·3628·3929··T-800-53-AC-6(9) | |||
| 000c8ea0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8eb0:·2d41·552d·3130·0a20·202d·204e·4953·542d··-AU-10.··-·NIST- | |||
| 000c8ec0:·3830·302d·3533·2d41·552d·3132·2863·290a··800-53-AU-12(c). | |||
| 000c8ed0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 000c8ee0:·4155·2d31·3428·3129·0a20·202d·204e·4953··AU-14(1).··-·NIS | |||
| 000c8ef0:·542d·3830·302d·3533·2d41·552d·3228·6429··T-800-53-AU-2(d) | |||
| 000c8f00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000c8f10:·2d41·552d·330a·2020·2d20·4e49·5354·2d38··-AU-3.··-·NIST-8 | |||
| 000c8f20:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 000c8f30:·2d20·4e49·5354·2d38·3030·2d35·332d·5349··-·NIST-800-53-SI | |||
| 000c8f40:·2d34·2832·3329·0a20·202d·2050·4349·2d44··-4(23).··-·PCI-D | |||
| 000c8f50:·5353·2d52·6571·2d31·302e·310a·2020·2d20··SS-Req-10.1.··-· | |||
| 000c8f60:·5043·492d·4453·5376·342d·3130·2e32·2e31··PCI-DSSv4-10.2.1 | |||
| 000c8f70:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000c8f80:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000c8f90:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000c8fa0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000c8fb0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000c8fc0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 000c8fd0:·6465·640a·2020·2d20·7365·7276·6963·655f··ded.··-·service_ | |||
| 000c8fe0:·6175·6469·7464·5f65·6e61·626c·6564·0a0a··auditd_enabled.. | |||
| 000c8ff0:·2d20·6e61·6d65·3a20·456e·6162·6c65·2061··-·name:·Enable·a | |||
| 000c9000:·7564·6974·6420·5365·7276·6963·6520·2d20··uditd·Service·-· | |||
| 000c9010:·456e·6162·6c65·2073·6572·7669·6365·2061··Enable·service·a | |||
| 000c9020:·7564·6974·640a·2020·626c·6f63·6b3a·0a0a··uditd.··block:.. | |||
| 000c9030:·2020·2d20·6e61·6d65·3a20·4761·7468·6572····-·name:·Gather | |||
| 000c9040:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 000c9050:·7473·0a20·2020·2070·6163·6b61·6765·5f66··ts.····package_f | |||
| 000c9060:·6163·7473·3a0a·2020·2020·2020·6d61·6e61··acts:.······mana | |||
| 000c9070:·6765·723a·2061·7574·6f0a·0a20·202d·206e··ger:·auto..··-·n | |||
| 000c9080:·616d·653a·2045·6e61·626c·6520·6175·6469··ame:·Enable·audi | |||
| 000c9090:·7464·2053·6572·7669·6365·202d·2045·6e61··td·Service·-·Ena | |||
| 000c90a0:·626c·6520·5365·7276·6963·6520·6175·6469··ble·Service·audi | |||
| 000c90b0:·7464·0a20·2020·2061·6e73·6962·6c65·2e62··td.····ansible.b | |||
| 000c90c0:·7569·6c74·696e·2e73·7973·7465·6d64·3a0a··uiltin.systemd:. | |||
| 000c90d0:·2020·2020·2020·6e61·6d65·3a20·6175·6469········name:·audi | |||
| 000c90e0:·7464·0a20·2020·2020·2065·6e61·626c·6564··td.······enabled | |||
| 000c90f0:·3a20·7472·7565·0a20·2020·2020·2073·7461··:·true.······sta | |||
| 000c9100:·7465·3a20·7374·6172·7465·640a·2020·2020··te:·started.···· | |||
| 000c9110:·2020·6d61·736b·6564·3a20·6661·6c73·650a····masked:·false. | |||
| 000c9120:·2020·2020·7768·656e·3a0a·2020·2020·2d20······when:.····-· | |||
| 000c9130:·2722·6175·6469·7464·2220·696e·2061·6e73··'"auditd"·in·ans | |||
| 000c9140:·6962·6c65·5f66·6163·7473·2e70·6163·6b61··ible_facts.packa | |||
| 000c9150:·6765·7327·0a20·2077·6865·6e3a·0a20·202d··ges'.··when:.··- | |||
| 000c9160:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000c9170:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000c9180:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000c9190:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000c91a0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000c91b0:·696e·6572·225d·0a20·202d·2027·2261·7564··iner"].··-·'"aud | |||
| 000c91c0:·6974·6422·2069·6e20·616e·7369·626c·655f··itd"·in·ansible_ | |||
| 000c91d0:·6661·6374·732e·7061·636b·6167·6573·270a··facts.packages'. | |||
| 000c91e0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 000c91f0:·2d35·2e34·2e31·2e31·0a20·202d·204e·4953··-5.4.1.1.··-·NIS | |||
| 000c9200:·542d·3830·302d·3137·312d·332e·332e·310a··T-800-171-3.3.1. | |||
| 000c9210:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 000c9220:·2d33·2e33·2e32·0a20·202d·204e·4953·542d··-3.3.2.··-·NIST- | |||
| 000c9230:·3830·302d·3137·312d·332e·332e·360a·2020··800-171-3.3.6.·· | |||
| 000c9240:·2d20·4e49·5354·2d38·3030·2d35·332d·4143··-·NIST-800-53-AC | |||
| 000c9250:·2d32·2867·290a·2020·2d20·4e49·5354·2d38··-2(g).··-·NIST-8 | |||
| Max diff block lines reached; 414/35244 bytes (1.17%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·18.04·LTS·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 48 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 51 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 9161, 14 lines modified | Offset 9161, 18 lines modified | ||
| 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- | 9161 | ···························00139,·SRG-OS-000352-GPOS-00140,·SRG-OS-000353-GPOS-00141,·SRG- |
| 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- | 9162 | ···························OS-000354-GPOS-00142,·SRG-OS-000358-GPOS-00145,·SRG-OS-000365- |
| 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 | 9163 | ···························GPOS-00152,·SRG-OS-000392-GPOS-00172,·SRG-OS-000475-GPOS-00220 |
| 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- | 9164 | ············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r····SRG-APP-000095-CTR-000170,·SRG-APP-000409-CTR-000990,·SRG-APP- |
| 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 | 9165 | ···························000508-CTR-001300,·SRG-APP-000510-CTR-001310 |
| 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 | 9166 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R33,·R73 |
| 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 | 9167 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.2.1 |
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9169 | [customizations.services] | ||
| 9170 | enabled·=·["auditd"] | ||
| 9168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9173 | -·name:·Gather·the·package·facts | 9176 | -·name:·Gather·the·package·facts |
| 9174 | ··package_facts: | 9177 | ··package_facts: |
| Offset 9232, 31 lines modified | Offset 9236, 14 lines modified | ||
| 9232 | ··-·PCI-DSSv4-10.2.1 | 9236 | ··-·PCI-DSSv4-10.2.1 |
| 9233 | ··-·enable_strategy | 9237 | ··-·enable_strategy |
| 9234 | ··-·low_complexity | 9238 | ··-·low_complexity |
| 9235 | ··-·low_disruption | 9239 | ··-·low_disruption |
| 9236 | ··-·medium_severity | 9240 | ··-·medium_severity |
| 9237 | ··-·no_reboot_needed | 9241 | ··-·no_reboot_needed |
| 9238 | ··-·service_auditd_enabled | 9242 | ··-·service_auditd_enabled |
| 9239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 9244 | include·enable_auditd | ||
| 9245 | class·enable_auditd·{ | ||
| 9246 | ··service·{'auditd': | ||
| 9247 | ····enable·=>·true, | ||
| 9248 | ····ensure·=>·'running', | ||
| 9249 | ··} | ||
| 9250 | } | ||
| 9251 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9252 | [customizations.services] | ||
| 9253 | enabled·=·["auditd"] | ||
| 9254 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 9243 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 9255 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9244 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9256 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9245 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9257 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9246 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9258 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9247 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9259 | #·Remediation·is·applicable·only·in·certain·platforms | 9248 | #·Remediation·is·applicable·only·in·certain·platforms |
| 9260 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- | 9249 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·dpkg-query·--show·-- |
| Offset 9266, 11 lines modified | Offset 9253, 24 lines modified | ||
| 9266 | "$SYSTEMCTL_EXEC"·unmask·'auditd.service' | 9253 | "$SYSTEMCTL_EXEC"·unmask·'auditd.service' |
| 9267 | "$SYSTEMCTL_EXEC"·start·'auditd.service' | 9254 | "$SYSTEMCTL_EXEC"·start·'auditd.service' |
| 9268 | "$SYSTEMCTL_EXEC"·enable·'auditd.service' | 9255 | "$SYSTEMCTL_EXEC"·enable·'auditd.service' |
| 9269 | else | 9256 | else |
| 9270 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 9257 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 9271 | fi | 9258 | fi |
| 9259 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9260 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9261 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9262 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9263 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 9264 | include·enable_auditd | ||
| 9265 | class·enable_auditd·{ | ||
| 9266 | ··service·{'auditd': | ||
| 9267 | ····enable·=>·true, | ||
| 9268 | ····ensure·=>·'running', | ||
| 9269 | ··} | ||
| 9270 | } | ||
| 9272 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or | 9271 | Red·Hat·and·Red·Hat·Enterprise·Linux·are·either·registered·trademarks·or |
| 9273 | trademarks·of·Red·Hat,·Inc.·in·the·United·States·and·other·countries.·All·other | 9272 | trademarks·of·Red·Hat,·Inc.·in·the·United·States·and·other·countries.·All·other |
| 9274 | names·are·registered·trademarks·or·trademarks·of·their·respective·companies. | 9273 | names·are·registered·trademarks·or·trademarks·of·their·respective·companies. |
| 9275 | Generated·using·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8C_\x8A_\x8P·1.4.0 | 9274 | Generated·using·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8C_\x8A_\x8P·1.4.0 |
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19732, 164 lines modified | Offset 19732, 164 lines modified | ||
| 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | 0004d130:·7267·6574·3d22·2369·646d·3439·3336·2220··rget="#idm4936"· | ||
| 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0004d140:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0004d150:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0004d160:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0004d170:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0004d180:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0004d190:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0004d1a0:·6e20·4 | 0004d1a0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0004d1b0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0004d1c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004d1d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004d1e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d1f0:·6964·6d34·3933·3622·3e3c·7072·653e·3c63··idm4936"><pre><c | |||
| 0004d200:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0004d210:·5d0a·6e61·6d65·203d·2022·7273·7973·6c6f··].name·=·"rsyslo | |||
| 0004d220:·6722·0a76·6572·7369·6f6e·203d·2022·2a22··g".version·=·"*" | |||
| 0004d230:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004d240:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004d250:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004d260:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004d270:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004d280:·743d·2223·6964·6d34·3933·3722·2074·6162··t="#idm4937"·tab | |||
| 0004d290:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004d2a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004d2b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004d2c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004d2d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004d2e0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0004d2f0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004d300:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004d310:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004d320:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004d330:·643d·2269·646d·3439·3337·223e·3c74·6162··d="idm4937"><tab | |||
| 0004d340:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004d350:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004d360:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004d370:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004d380:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004d390:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004d3a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004d3b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004d3c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004d3d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004d3e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004d3f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004d400:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004d410:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0004d420:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004d430:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0004d440:·7265·2072·7379·736c·6f67·2069·7320·696e··re·rsyslog·is·in | |||
| 0004d450:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0004d460:·653a·0a20·2020·206e·616d·653a·2072·7379··e:.····name:·rsy | |||
| 0004d470:·736c·6f67·0a20·2020·2073·7461·7465·3a20··slog.····state:· | |||
| 0004d480:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0004d490:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004d4a0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004d4b0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004d4c0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004d4d0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0004d4e0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0004d4f0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0004d500:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 0004d510:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d520:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0004d530:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0004d540:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0004d550:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0004d560:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0004d570:·6b61·6765·5f72·7379·736c·6f67·5f69·6e73··kage_rsyslog_ins | |||
| 0004d580:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0004d590:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0004d5a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0004d5b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0004d5c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0004d5d0:·2d74·6172·6765·743d·2223·6964·6d34·3933··-target="#idm493 | |||
| 0004d5e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0004d5f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0004d600:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0004d610:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0004d620:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0004d630:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0004d640:·7469·6f6e·2053·6865·6c6c·2073·6372·6970··tion·Shell·scrip | |||
| 0004d | 0004d650:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0004d | 0004d660:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0004d | 0004d670:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0004d | 0004d680:·2220·6964·3d22·6964·6d34·3933·3822·3e3c··"·id="idm4938">< | ||
| 0004d | 0004d690:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0004d | 0004d6a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0004d | 0004d6b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0004d | 0004d6c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0004d | 0004d6d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0004d | 0004d6e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0004d | 0004d6f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0004d | 0004d700:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0004d | 0004d710:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0004d | 0004d720:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0004d | 0004d730:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0004d | 0004d740:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0004d | 0004d750:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0004d | 0004d760:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0004d | 0004d770:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0004d2e0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0004d2f0:·6e73·7572·6520·7273·7973·6c6f·6720·6973··nsure·rsyslog·is | |||
| 0004d300:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0004d310:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0004d320:·7273·7973·6c6f·670a·2020·2020·7374·6174··rsyslog.····stat | |||
| 0004d330:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0004d340:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0004d350:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0004d360:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0004d370:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| Max diff block lines reached; 271800/294210 bytes (92.38%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·18.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:18.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1549, 14 lines modified | Offset 1549, 19 lines modified | ||
| 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1549 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1550 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1551 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1552 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1553 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1554 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1555 | ···························SRG-OS-000480-GPOS-00227 | 1555 | ···························SRG-OS-000480-GPOS-00227 |
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1557 | [[packages]] | ||
| 1558 | name·=·"rsyslog" | ||
| 1559 | version·=·"*" | ||
| 1556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1557 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1558 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1559 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1560 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1561 | -·name:·Ensure·rsyslog·is·installed | 1565 | -·name:·Ensure·rsyslog·is·installed |
| 1562 | ··package: | 1566 | ··package: |
| Offset 1568, 44 lines modified | Offset 1573, 39 lines modified | ||
| 1568 | ··-·NIST-800-53-CM-6(a) | 1573 | ··-·NIST-800-53-CM-6(a) |
| 1569 | ··-·enable_strategy | 1574 | ··-·enable_strategy |
| 1570 | ··-·low_complexity | 1575 | ··-·low_complexity |
| 1571 | ··-·low_disruption | 1576 | ··-·low_disruption |
| 1572 | ··-·medium_severity | 1577 | ··-·medium_severity |
| 1573 | ··-·no_reboot_needed | 1578 | ··-·no_reboot_needed |
| 1574 | ··-·package_rsyslog_installed | 1579 | ··-·package_rsyslog_installed |
| 1575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1580 | include·install_rsyslog | ||
| 1581 | class·install_rsyslog·{ | ||
| 1582 | ··package·{·'rsyslog': | ||
| 1583 | ····ensure·=>·'installed', | ||
| 1584 | ··} | ||
| 1585 | } | ||
| 1586 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1587 | [[packages]] | ||
| 1588 | name·=·"rsyslog" | ||
| 1589 | version·=·"*" | ||
| 1590 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1591 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1592 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1593 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1594 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1595 | #·Remediation·is·applicable·only·in·certain·platforms | 1585 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1596 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1586 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1597 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1587 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1598 | else | 1588 | else |
| 1599 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1589 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1600 | fi | 1590 | fi |
| 1591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1596 | include·install_rsyslog | ||
| 1597 | class·install_rsyslog·{ | ||
| 1598 | ··package·{·'rsyslog': | ||
| 1599 | ····ensure·=>·'installed', | ||
| 1600 | ··} | ||
| 1601 | } | ||
| 1601 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1602 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1602 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·18.04. | 1603 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·18.04. |
| 1603 | The·rsyslog·service·can·be·enabled·with·the·following·command: | 1604 | The·rsyslog·service·can·be·enabled·with·the·following·command: |
| 1604 | $·sudo·systemctl·enable·rsyslog.service | 1605 | $·sudo·systemctl·enable·rsyslog.service |
| 1605 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1606 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1606 | ············services,·which·are·essential·to·system·administration. | 1607 | ············services,·which·are·essential·to·system·administration. |
| 1607 | Severity: ··medium | 1608 | Severity: ··medium |
| Offset 1623, 14 lines modified | Offset 1623, 18 lines modified | ||
| 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1623 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1624 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1625 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1626 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1627 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1628 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1631 | [customizations.services] | ||
| 1632 | enabled·=·["rsyslog"] | ||
| 1630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1635 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1638 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1636 | ··block: | 1639 | ··block: |
| Offset 1654, 31 lines modified | Offset 1658, 14 lines modified | ||
| 1654 | ··-·NIST-800-53-CM-6(a) | 1658 | ··-·NIST-800-53-CM-6(a) |
| 1655 | ··-·enable_strategy | 1659 | ··-·enable_strategy |
| 1656 | ··-·low_complexity | 1660 | ··-·low_complexity |
| 1657 | ··-·low_disruption | 1661 | ··-·low_disruption |
| 1658 | ··-·medium_severity | 1662 | ··-·medium_severity |
| 1659 | ··-·no_reboot_needed | 1663 | ··-·no_reboot_needed |
| 1660 | ··-·service_rsyslog_enabled | 1664 | ··-·service_rsyslog_enabled |
| 1661 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1662 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1663 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1664 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1665 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1666 | include·enable_rsyslog | ||
| 1667 | class·enable_rsyslog·{ | ||
| Max diff block lines reached; 32079/38018 bytes (84.38%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d30·3 | 00037d30:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15095, 169 lines modified | Offset 15095, 169 lines modified | ||
| 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003af60:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | 0003af70:·2223·6964·6d32·3733·3522·2074·6162·696e··"#idm2735"·tabin | ||
| 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003af80:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003af90:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003afa0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003afb0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003afc0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003afd0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003afd0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003afe0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aff0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b000:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b010:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b020:·2269·646d·3237·3335·223e·3c74·6162·6c65··"idm2735"><table | |||
| 0003b030:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b040:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b050:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b060:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b070:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b080:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b090:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b0a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b0b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b0c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b0d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b0e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003 | 0003afe0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aff0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b000:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b010:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b020:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b030:·3335·223e·3c70·7265·3e3c·636f·6465·3e0a··35"><pre><code>. | |||
| 0003b040:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b050:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b060:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b070:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b080:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b090:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b0a0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b0b0:·7461·2d74·6172·6765·743d·2223·6964·6d32··ta-target="#idm2 | |||
| 0003b0c0:·3733·3622·2074·6162·696e·6465·783d·2230··736"·tabindex="0 | |||
| 0003b0d0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b0e0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b0f0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b100:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b110:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b120:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b130:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b140:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b150:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b160:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b170:·3336·223e·3c74·6162·6c65·2063·6c61·7373··36"><table·class | |||
| 0003b180:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b190:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b1a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b1b0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b1c0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b1f0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b200:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b210:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b | 0003b220:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 0003b110:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b120:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b130:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b140:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b150:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b160:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b170:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b180:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b190:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b1a0:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b1b0:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b1c0:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b1d0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b1e0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b1f0:·2d53·5449·472d·5542·5455·2d32·302d·3031··-STIG-UBTU-20-01 | |||
| 0003b200:·3034·3530·0a20·202d·204e·4953·542d·3830··0450.··-·NIST-80 | |||
| 0003b210:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b220:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b230:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b240:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b250:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b260:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b270:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b280:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b290:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b2a0:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b2 | 0003b230:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b240:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b250:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b260:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b270:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b280:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b290:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b2a0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b2b0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b2c0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b2d0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b2e0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b2f0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b300:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b310:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b320:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b330:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b340:·5542·5455·2d32·302d·3031·3034·3530·0a20··UBTU-20-010450.· | |||
| 0003b350:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b360:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b370:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b380:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| Max diff block lines reached; 976102/999340 bytes (97.67%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 123 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 124 | ············_\x8c_\x8i_\x8s············1.4.1 | 124 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 138 | ··package: |
| Offset 143, 44 lines modified | Offset 148, 39 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 162 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 173 | else | 163 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 165 | fi |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | include·install_aide | ||
| 172 | class·install_aide·{ | ||
| 173 | ··package·{·'aide': | ||
| 174 | ····ensure·=>·'installed', | ||
| 175 | ··} | ||
| 176 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·aideinit | 179 | $·sudo·aideinit |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 181 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 182 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 182 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 623, 38 lines modified | Offset 623, 38 lines modified | ||
| 623 | ··tags: | 623 | ··tags: |
| 624 | ··-·disable_strategy | 624 | ··-·disable_strategy |
| 625 | ··-·low_disruption | 625 | ··-·low_disruption |
| 626 | ··-·medium_complexity | 626 | ··-·medium_complexity |
| 627 | ··-·medium_severity | 627 | ··-·medium_severity |
| 628 | ··-·no_reboot_needed | 628 | ··-·no_reboot_needed |
| 629 | ··-·package_prelink_removed | 629 | ··-·package_prelink_removed |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 635 | include·remove_prelink | ||
| 636 | class·remove_prelink·{ | ||
| 637 | ··package·{·'prelink': | ||
| 638 | ····ensure·=>·'purged', | ||
| 639 | ··} | ||
| 640 | } | ||
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 646 | if·[[·-f·/usr/sbin/prelink·]]; | 635 | if·[[·-f·/usr/sbin/prelink·]]; |
| 647 | then | 636 | then |
| 648 | prelink·-ua | 637 | prelink·-ua |
| 649 | fi | 638 | fi |
| 650 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 639 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 641 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 642 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 122700/128028 bytes (95.84%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15091, 169 lines modified | Offset 15091, 169 lines modified | ||
| 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003af20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | 0003af30:·646d·3237·3335·2220·7461·6269·6e64·6578··dm2735"·tabindex | ||
| 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003af40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003af50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003af60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003af70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003af80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003af90:·6d65·6469·6174·696f·6e20·4 | 0003af90:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003afa0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003afb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003afc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003afd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003afe0:·6d32·3733·3522·3e3c·7461·626c·6520·636c··m2735"><table·cl | |||
| 0003aff0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b000:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b010:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b020:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b030:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b040:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b050:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b060:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b070:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b080:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b090:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003 | 0003afa0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003afb0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003afc0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003afd0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003afe0:·7365·2220·6964·3d22·6964·6d32·3733·3522··se"·id="idm2735" | |||
| 0003aff0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b000:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b010:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b020:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3237·3336··target="#idm2736 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b0f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b100:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b110:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b120:·7365·2220·6964·3d22·6964·6d32·3733·3622··se"·id="idm2736" | |||
| 0003b130:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b140:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b150:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b160:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b170:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b180:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b190:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b1a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b1b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b1d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b1e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b0d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b0e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b0f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b100:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b110:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b120:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b130:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b140:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b150:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b160:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b170:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b180:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b190:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b1a0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b1b0:·4947·2d55·4254·552d·3230·2d30·3130·3435··IG-UBTU-20-01045 | |||
| 0003b1c0:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b1d0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b1e0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b1f0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b200:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b210:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b220:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b230:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b240:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b250:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b260:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b | 0003b1f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b200:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b210:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b220:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b230:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b240:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b250:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b260:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b270:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b280:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b290:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b2a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b2b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b2c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b2d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b2e0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b2f0:·202d·2044·4953·412d·5354·4947·2d55·4254···-·DISA-STIG-UBT | |||
| 0003b300:·552d·3230·2d30·3130·3435·300a·2020·2d20··U-20-010450.··-· | |||
| 0003b310:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b320:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b330:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b340:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| Max diff block lines reached; 844198/867436 bytes (97.32%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 123 | ············_\x8c_\x8i_\x8s············1.4.1 | 123 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 137 | ··package: |
| Offset 142, 44 lines modified | Offset 147, 39 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 149 | ··-·low_complexity |
| 145 | ··-·low_disruption | 150 | ··-·low_disruption |
| 146 | ··-·medium_severity | 151 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 171 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 161 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 172 | else | 162 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 164 | fi |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | include·install_aide | ||
| 171 | class·install_aide·{ | ||
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·aideinit | 178 | $·sudo·aideinit |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 179 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 180 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 181 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 181 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 622, 38 lines modified | Offset 622, 38 lines modified | ||
| 622 | ··tags: | 622 | ··tags: |
| 623 | ··-·disable_strategy | 623 | ··-·disable_strategy |
| 624 | ··-·low_disruption | 624 | ··-·low_disruption |
| 625 | ··-·medium_complexity | 625 | ··-·medium_complexity |
| 626 | ··-·medium_severity | 626 | ··-·medium_severity |
| 627 | ··-·no_reboot_needed | 627 | ··-·no_reboot_needed |
| 628 | ··-·package_prelink_removed | 628 | ··-·package_prelink_removed |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 634 | include·remove_prelink | ||
| 635 | class·remove_prelink·{ | ||
| 636 | ··package·{·'prelink': | ||
| 637 | ····ensure·=>·'purged', | ||
| 638 | ··} | ||
| 639 | } | ||
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 641 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 642 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 643 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 644 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 645 | if·[[·-f·/usr/sbin/prelink·]]; | 634 | if·[[·-f·/usr/sbin/prelink·]]; |
| 646 | then | 635 | then |
| 647 | prelink·-ua | 636 | prelink·-ua |
| 648 | fi | 637 | fi |
| 649 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 638 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 639 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 640 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 641 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 109881/115219 bytes (95.37%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d30·3 | 00037d30:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15118, 168 lines modified | Offset 15118, 168 lines modified | ||
| 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | 0003b0d0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | ||
| 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | 0003b0e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | ||
| 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b0f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b100:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b110:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b120:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b130:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b140:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d32·3733··apse"·id="idm273 | |||
| 0003b190:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b1a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1 | 0003b140:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b150:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b160:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b170:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b180:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b190:·6964·3d22·6964·6d32·3733·3522·3e3c·7072··id="idm2735"><pr | |||
| 0003b1a0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b1b0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b1c0:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b1d0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b1e0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1f0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b200:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b210:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b220:·6574·3d22·2369·646d·3237·3336·2220·7461··et="#idm2736"·ta | |||
| 0003b230:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b240:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b250:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b260:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b270:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b280:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b290:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b2a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b2b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b2c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b2d0:·6964·3d22·6964·6d32·3733·3622·3e3c·7461··id="idm2736"><ta | |||
| 0003b2e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b2f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b300:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b310:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b320:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b330:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b340:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b350:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b360:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b370:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b380:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b390:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b3a0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b3b0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b3c0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b3d0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b3e0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b3f0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b400:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b410:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b420:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b430:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b440:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b450:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b460:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b470:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b480:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b490:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b4a0:·4953·412d·5354·4947·2d55·4254·552d·3230··ISA-STIG-UBTU-20 | |||
| 0003b4b0:·2d30·3130·3435·300a·2020·2d20·4e49·5354··-010450.··-·NIST | |||
| 0003b4c0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b4d0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b4e0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b4f0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b500:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b510:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b520:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b530:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b540:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b550:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b560:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b570:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b580:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b590:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b5a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b5b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b5c0:·612d·7461·7267·6574·3d22·2369·646d·3237··a-target="#idm27 | |||
| 0003b5d0:·3337·2220·7461·6269·6e64·6578·3d22·3022··37"·tabindex="0" | |||
| 0003b5e0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b5f0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b600:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b610:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b620:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b630:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b640:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b650:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b660:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b670:·6522·2069·643d·2269·646d·3237·3337·223e··e"·id="idm2737"> | |||
| 0003b680:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b690:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b | 0003b6a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003b6b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b6c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b1d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b1e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b1f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b200:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b6d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b6e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| Max diff block lines reached; 1035502/1058602 bytes (97.82%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 127 | ············_\x8c_\x8i_\x8s············1.4.1 | 127 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 130 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 140 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 141 | ··package: |
| Offset 146, 44 lines modified | Offset 151, 39 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | include·install_aide | ||
| 159 | class·install_aide·{ | ||
| 160 | ··package·{·'aide': | ||
| 161 | ····ensure·=>·'installed', | ||
| 162 | ··} | ||
| 163 | } | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 176 | else | 166 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 168 | fi |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·aideinit | 182 | $·sudo·aideinit |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 185 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 626, 38 lines modified | Offset 626, 38 lines modified | ||
| 626 | ··tags: | 626 | ··tags: |
| 627 | ··-·disable_strategy | 627 | ··-·disable_strategy |
| 628 | ··-·low_disruption | 628 | ··-·low_disruption |
| 629 | ··-·medium_complexity | 629 | ··-·medium_complexity |
| 630 | ··-·medium_severity | 630 | ··-·medium_severity |
| 631 | ··-·no_reboot_needed | 631 | ··-·no_reboot_needed |
| 632 | ··-·package_prelink_removed | 632 | ··-·package_prelink_removed |
| 633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 638 | include·remove_prelink | ||
| 639 | class·remove_prelink·{ | ||
| 640 | ··package·{·'prelink': | ||
| 641 | ····ensure·=>·'purged', | ||
| 642 | ··} | ||
| 643 | } | ||
| 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 633 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 634 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 635 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 636 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 637 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 649 | if·[[·-f·/usr/sbin/prelink·]]; | 638 | if·[[·-f·/usr/sbin/prelink·]]; |
| 650 | then | 639 | then |
| 651 | prelink·-ua | 640 | prelink·-ua |
| 652 | fi | 641 | fi |
| 653 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 642 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 129182/134511 bytes (96.04%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15114, 168 lines modified | Offset 15114, 168 lines modified | ||
| 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | 0003b090:·7267·6574·3d22·2369·646d·3237·3335·2220··rget="#idm2735"· | ||
| 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b0e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b0f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b100:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003b110:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b120:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b130:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b140:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b150:·6964·6d32·3733·3522·3e3c·7072·653e·3c63··idm2735"><pre><c | |||
| 0003b160:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b170:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b180:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b100:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b110:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b120:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b130:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b140:·2220·6964·3d22·6964·6d32·3733·3522·3e3c··"·id="idm2735">< | |||
| 0003b150:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b160:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b170:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b180:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b190:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b1e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b1f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b200:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b210:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b220:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b230:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b240:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b250:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b260:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b270:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b280:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b290:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b2e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b2f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b300:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b310:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b320:·3230·2d30·3130·3435·300a·2020·2d20·4e49··20-010450.··-·NI | |||
| 0003b330:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b340:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b350:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b360:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b370:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b380:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b390:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3a0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b3b0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003b3c0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003b3d0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003b3e0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003b3f | 0003b190:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | ||
| 0003b | 0003b1a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | ||
| 0003b | 0003b1b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | ||
| 0003b | 0003b1c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | ||
| 0003b | 0003b1d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b | 0003b1e0:·2369·646d·3237·3336·2220·7461·6269·6e64··#idm2736"·tabind | ||
| 0003b | 0003b1f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b46 | 0003b200:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b | 0003b210:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b | 0003b220:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b | 0003b230:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b4a0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3237··lapse"·id="idm27 | |||
| 0003b4f0:·3336·223e·3c74·6162·6c65·2063·6c61·7373··36"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b | 0003b240:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 0003b250:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b260:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b270:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b280:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b290:·6964·6d32·3733·3622·3e3c·7461·626c·6520··idm2736"><table· | |||
| 0003b2a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b2e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b2f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b300:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b310:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b | 0003b320:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b330:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003b340:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b | 0003b350:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003b | 0003b360:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b5e0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003b5f0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| Max diff block lines reached; 1008676/1031776 bytes (97.76%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·20.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 126 | ············_\x8c_\x8i_\x8s············1.4.1 | 126 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 129 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of |
| 183 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about | 184 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about |
| 184 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 625, 38 lines modified | Offset 625, 38 lines modified | ||
| 625 | ··tags: | 625 | ··tags: |
| 626 | ··-·disable_strategy | 626 | ··-·disable_strategy |
| 627 | ··-·low_disruption | 627 | ··-·low_disruption |
| 628 | ··-·medium_complexity | 628 | ··-·medium_complexity |
| 629 | ··-·medium_severity | 629 | ··-·medium_severity |
| 630 | ··-·no_reboot_needed | 630 | ··-·no_reboot_needed |
| 631 | ··-·package_prelink_removed | 631 | ··-·package_prelink_removed |
| 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 637 | include·remove_prelink | ||
| 638 | class·remove_prelink·{ | ||
| 639 | ··package·{·'prelink': | ||
| 640 | ····ensure·=>·'purged', | ||
| 641 | ··} | ||
| 642 | } | ||
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 632 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 633 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 634 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 635 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 636 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 648 | if·[[·-f·/usr/sbin/prelink·]]; | 637 | if·[[·-f·/usr/sbin/prelink·]]; |
| 649 | then | 638 | then |
| 650 | prelink·-ua | 639 | prelink·-ua |
| 651 | fi | 640 | fi |
| 652 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 641 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 125195/130534 bytes (95.91%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20045, 165 lines modified | Offset 20045, 165 lines modified | ||
| 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004e4c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | 0004e4d0:·646d·3130·3830·3922·2074·6162·696e·6465··dm10809"·tabinde | ||
| 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0004e4e0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0004e4f0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0004e500:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0004e510:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0004e520:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0004e530:·656d·6564·6961·7469·6f6e·204 | 0004e530:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0004e540:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0004e550:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004e560:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004e570:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004e580:·646d·3130·3830·3922·3e3c·7461·626c·6520··dm10809"><table· | |||
| 0004e590:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004e5 | 0004e540:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0004e550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004e560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0004e570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0004e580:·7073·6522·2069·643d·2269·646d·3130·3830··pse"·id="idm1080 | |||
| 0004e590:·3922·3e3c·7072·653e·3c63·6f64·653e·0a5b··9"><pre><code>.[ | |||
| 0004e5a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0004e5b0:·203d·2022·7273·7973·6c6f·6722·0a76·6572···=·"rsyslog".ver | |||
| 0004e5c0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0004e5d0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0004e5e0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0004e5f0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0004e600:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0004e610:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0004e620:·6d31·3038·3130·2220·7461·6269·6e64·6578··m10810"·tabindex | |||
| 0004e630:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0004e640:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0004e650:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0004e660:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0004e670:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0004e680:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0004e690:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0004e6a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004e6b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004e6c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004e6d0:·6d31·3038·3130·223e·3c74·6162·6c65·2063··m10810"><table·c | |||
| 0004e6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0004e | 0004e6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004e5c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004e5d0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004e5e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004e5f0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004e | 0004e700:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004e710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0004e720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0004e730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004e740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004e750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0004e760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004e770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0004e780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0004e790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0004e7a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0004e | 0004e7b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0004e620:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004e630:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004e640:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004e650:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004e660:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004e670:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004e680:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0004e | 0004e7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0004e7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2072··-·name:·Ensure·r | |||
| 0004e7e0:·7379·736c·6f67·2069·7320·696e·7374·616c··syslog·is·instal | |||
| 0004e7f0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0004e800:·2020·206e·616d·653a·2072·7379·736c·6f67·····name:·rsyslog | |||
| 0004e810:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0004e820:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0004e830:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0004e840:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0004e850:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0004e860:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0004e870:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0004e880:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | |||
| 0004e890:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0004e8a0:·290a·2020·2d20·656e·6162·6c65·5f73·7472··).··-·enable_str | |||
| 0004e8b0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0004e8c0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0004e8d0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0004e8e0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0004e8f0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0004e | 0004e900:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | ||
| 0004e910:·5f72·7379·736c·6f67·5f69·6e73·7461·6c6c··_rsyslog_install | |||
| 0004e6b0:·2020·2020·6e61·6d65·3a20·7273·7973·6c6f······name:·rsyslo | |||
| 0004e6c0:·670a·2020·2020·7374·6174·653a·2070·7265··g.····state:·pre | |||
| 0004e6d0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0004e6e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0004e6f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0004e700:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0004e710:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0004e720:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0004e730:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0004e740:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0004e750:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0004e760:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004e770:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004e780:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004e790:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004e7a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004e7b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0004e7c0:·655f·7273·7973·6c6f·675f·696e·7374·616c··e_rsyslog_instal | |||
| 0004e7d0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0004e7e0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004e7f0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004e800:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0004e810:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0004e820:·7267·6574·3d22·2369·646d·3130·3831·3022··rget="#idm10810" | |||
| Max diff block lines reached; 292638/315186 bytes (92.85%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·20.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1557, 14 lines modified | Offset 1557, 19 lines modified | ||
| 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1557 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1558 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1561 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1562 | ···························SRG-OS-000480-GPOS-00227 | 1562 | ···························SRG-OS-000480-GPOS-00227 |
| 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 | 1563 | ············_\x8c_\x8i_\x8s············4.2.1.1 |
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1565 | [[packages]] | ||
| 1566 | name·=·"rsyslog" | ||
| 1567 | version·=·"*" | ||
| 1564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1569 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1570 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1571 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1572 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1569 | -·name:·Ensure·rsyslog·is·installed | 1573 | -·name:·Ensure·rsyslog·is·installed |
| 1570 | ··package: | 1574 | ··package: |
| Offset 1576, 44 lines modified | Offset 1581, 39 lines modified | ||
| 1576 | ··-·NIST-800-53-CM-6(a) | 1581 | ··-·NIST-800-53-CM-6(a) |
| 1577 | ··-·enable_strategy | 1582 | ··-·enable_strategy |
| 1578 | ··-·low_complexity | 1583 | ··-·low_complexity |
| 1579 | ··-·low_disruption | 1584 | ··-·low_disruption |
| 1580 | ··-·medium_severity | 1585 | ··-·medium_severity |
| 1581 | ··-·no_reboot_needed | 1586 | ··-·no_reboot_needed |
| 1582 | ··-·package_rsyslog_installed | 1587 | ··-·package_rsyslog_installed |
| 1583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1588 | include·install_rsyslog | ||
| 1589 | class·install_rsyslog·{ | ||
| 1590 | ··package·{·'rsyslog': | ||
| 1591 | ····ensure·=>·'installed', | ||
| 1592 | ··} | ||
| 1593 | } | ||
| 1594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1595 | [[packages]] | ||
| 1596 | name·=·"rsyslog" | ||
| 1597 | version·=·"*" | ||
| 1598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1588 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1589 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1590 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1591 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1592 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1603 | #·Remediation·is·applicable·only·in·certain·platforms | 1593 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1604 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1594 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1605 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1595 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1606 | else | 1596 | else |
| 1607 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1597 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1608 | fi | 1598 | fi |
| 1599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1604 | include·install_rsyslog | ||
| 1605 | class·install_rsyslog·{ | ||
| 1606 | ··package·{·'rsyslog': | ||
| 1607 | ····ensure·=>·'installed', | ||
| 1608 | ··} | ||
| 1609 | } | ||
| 1609 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1610 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1610 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·20.04. | 1611 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·20.04. |
| 1611 | The·rsyslog·service·can·be·enabled·with·the·following·command: | 1612 | The·rsyslog·service·can·be·enabled·with·the·following·command: |
| 1612 | $·sudo·systemctl·enable·rsyslog.service | 1613 | $·sudo·systemctl·enable·rsyslog.service |
| 1613 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1614 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1614 | ············services,·which·are·essential·to·system·administration. | 1615 | ············services,·which·are·essential·to·system·administration. |
| 1615 | Severity: ··medium | 1616 | Severity: ··medium |
| Offset 1634, 14 lines modified | Offset 1634, 18 lines modified | ||
| 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1634 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1635 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1636 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1637 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 | 1638 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010432 |
| 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 | 1639 | ············_\x8c_\x8i_\x8s············4.2.1.2 |
| 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule | 1640 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238353r654234_rule |
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1642 | [customizations.services] | ||
| 1643 | enabled·=·["rsyslog"] | ||
| 1641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1642 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1643 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1644 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1645 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1646 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1649 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1647 | ··block: | 1650 | ··block: |
| Offset 1666, 31 lines modified | Offset 1670, 14 lines modified | ||
| 1666 | ··-·NIST-800-53-CM-6(a) | 1670 | ··-·NIST-800-53-CM-6(a) |
| 1667 | ··-·enable_strategy | 1671 | ··-·enable_strategy |
| 1668 | ··-·low_complexity | 1672 | ··-·low_complexity |
| 1669 | ··-·low_disruption | 1673 | ··-·low_disruption |
| 1670 | ··-·medium_severity | 1674 | ··-·medium_severity |
| 1671 | ··-·no_reboot_needed | 1675 | ··-·no_reboot_needed |
| 1672 | ··-·service_rsyslog_enabled | 1676 | ··-·service_rsyslog_enabled |
| 1673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1674 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1675 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1676 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1677 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1678 | include·enable_rsyslog | ||
| 1679 | class·enable_rsyslog·{ | ||
| Max diff block lines reached; 33093/38896 bytes (85.08%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d90:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037da0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037db0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037dc0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037dd0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037de0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037df0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e00:·6f66·2032·3032·3 | 00037e00:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e10:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e20:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e30:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e40:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e50:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e60:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e70:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15073, 168 lines modified | Offset 15073, 168 lines modified | ||
| 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | 0003ae00:·6765·743d·2223·6964·6d32·3733·3522·2074··get="#idm2735"·t | ||
| 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae10:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae20:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae30:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ae40:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ae50:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ae60:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ae70:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003ae80:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003ae90:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003aea0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aeb0:·2069·643d·2269·646d·3237·3335·223e·3c74···id="idm2735"><t | |||
| 0003aec0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003aed0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003aee0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003aef0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af00:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af10:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003af20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af30:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003af40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003af50:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003af60:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003af70:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a | 0003ae70:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003ae80:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003ae90:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003aea0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aeb0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003aec0:·646d·3237·3335·223e·3c70·7265·3e3c·636f··dm2735"><pre><co | |||
| 0003aed0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003aee0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003aef0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003af00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003af10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003af20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003af30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003af40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003af50:·6964·6d32·3733·3622·2074·6162·696e·6465··idm2736"·tabinde | |||
| 0003af60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003af70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003af80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003af90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003afa0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003afb0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003afc0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3237·3336·223e·3c74·6162·6c65·2063··dm2736"><table·c | |||
| 0003b010:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b020:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b030:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b040:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b050:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b060:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b070:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b080:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b090:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0a0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003 | 0003b0b0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003afa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003afb0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003afc0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003afd0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003afe0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003aff0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b000:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b010:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b020:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b030:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b040:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b050:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b060:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b070:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b080:·4449·5341·2d53·5449·472d·5542·5455·2d32··DISA-STIG-UBTU-2 | |||
| 0003b090:·302d·3031·3034·3530·0a20·202d·204e·4953··0-010450.··-·NIS | |||
| 0003b0a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b0b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b0c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b0d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b0e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b0f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b100:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b110:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b120:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b130:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b140:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b | 0003b0c0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b0d0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b0e0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b0f0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b100:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b110:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b120:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b130:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b140:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b150:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b160:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b170:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b180:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b190:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b1a0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b1b0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b1c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b1d0:·5449·472d·5542·5455·2d32·302d·3031·3034··TIG-UBTU-20-0104 | |||
| 0003b1e0:·3530·0a20·202d·204e·4953·542d·3830·302d··50.··-·NIST-800- | |||
| 0003b1f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b200:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b210:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b220:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| Max diff block lines reached; 435482/458444 bytes (94.99%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·20.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R11 | 42 | ··············Guide·(STIG)·V1R11 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:20.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-20-010450 |
| 117 | ············_\x8c_\x8i_\x8s············1.4.1 | 117 | ············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule | 120 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-238371r880913_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 136, 44 lines modified | Offset 141, 39 lines modified | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | 141 | ··-·PCI-DSSv4-11.5.2 |
| 137 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 138 | ··-·low_complexity | 143 | ··-·low_complexity |
| 139 | ··-·low_disruption | 144 | ··-·low_disruption |
| 140 | ··-·medium_severity | 145 | ··-·medium_severity |
| 141 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 142 | ··-·package_aide_installed | 147 | ··-·package_aide_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | include·install_aide | ||
| 149 | class·install_aide·{ | ||
| 150 | ··package·{·'aide': | ||
| 151 | ····ensure·=>·'installed', | ||
| 152 | ··} | ||
| 153 | } | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 155 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 166 | else | 156 | else |
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168 | fi | 158 | fi |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | include·install_aide | ||
| 165 | class·install_aide·{ | ||
| 166 | ··package·{·'aide': | ||
| 167 | ····ensure·=>·'installed', | ||
| 168 | ··} | ||
| 169 | } | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | Run·the·following·command·to·generate·a·new·database: | 171 | Run·the·following·command·to·generate·a·new·database: |
| 171 | $·sudo·aideinit | 172 | $·sudo·aideinit |
| 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 173 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a | 174 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide.wrapper·(or·hashes·of·these·files),·in·a |
| 174 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 175 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 175 | newly-generated·database·can·be·installed·as·follows: | 176 | newly-generated·database·can·be·installed·as·follows: |
| Offset 7085, 14 lines modified | Offset 7085, 19 lines modified | ||
| 7085 | Severity: ··medium | 7085 | Severity: ··medium |
| 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7086 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 7087 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 | 7088 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00225 |
| 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 | 7089 | References:·_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··UBTU-20-010057 |
| 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 | 7090 | ············_\x8c_\x8i_\x8s·····5.3.1 |
| 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule | 7091 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-238228r653859_rule |
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7093 | [[packages]] | ||
| 7094 | name·=·"libpam-pwquality" | ||
| 7095 | version·=·"*" | ||
| 7092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7096 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7097 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7098 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7099 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7100 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7097 | -·name:·Gather·the·package·facts | 7101 | -·name:·Gather·the·package·facts |
| 7098 | ··package_facts: | 7102 | ··package_facts: |
| Offset 7115, 45 lines modified | Offset 7120, 40 lines modified | ||
| 7115 | ··-·DISA-STIG-UBTU-20-010057 | 7120 | ··-·DISA-STIG-UBTU-20-010057 |
| 7116 | ··-·enable_strategy | 7121 | ··-·enable_strategy |
| 7117 | ··-·low_complexity | 7122 | ··-·low_complexity |
| 7118 | ··-·low_disruption | 7123 | ··-·low_disruption |
| 7119 | ··-·medium_severity | 7124 | ··-·medium_severity |
| 7120 | ··-·no_reboot_needed | 7125 | ··-·no_reboot_needed |
| 7121 | ··-·package_pam_pwquality_installed | 7126 | ··-·package_pam_pwquality_installed |
| 7122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7127 | include·install_libpam-pwquality | ||
| Max diff block lines reached; 52873/58547 bytes (90.31%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d30·3 | 00037d30:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15108, 169 lines modified | Offset 15108, 169 lines modified | ||
| 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | 0003b040:·3239·3032·2220·7461·6269·6e64·6578·3d22··2902"·tabindex=" | ||
| 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b050:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b060:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b070:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b080:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b090:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b0a0:·6469·6174·696f·6e20·4 | 0003b0a0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b0b0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b0c0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0d0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0e0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b0f0:·3930·3222·3e3c·7461·626c·6520·636c·6173··902"><table·clas | |||
| 0003b100:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b110:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b120:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b130:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b140:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b150:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b160:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b170:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b180:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b190:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b1a0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b1b0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b | 0003b0b0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b0c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0f0:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b100:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b110:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b120:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b130:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b140:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b150:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b160:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b170:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b180:·7267·6574·3d22·2369·646d·3239·3033·2220··rget="#idm2903"· | |||
| 0003b190:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b1a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b1b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b1c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b1d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b200:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b210:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b220:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b230:·2220·6964·3d22·6964·6d32·3930·3322·3e3c··"·id="idm2903">< | |||
| 0003b240:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b250:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b260:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b270:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b280:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b290:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b | 0003b2a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b1e0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1f0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b200:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b210:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b220:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b230:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b240:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b250:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b260:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b270:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b280:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b290:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b2a0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b2b0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b2c0:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b2d0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2e0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2f0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b300:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b310:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b320:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b330:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b340:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b350:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b360:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b370:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b | 0003b2b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b2c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b2f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b300:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b310:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b320:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b330:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b340:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b350:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b360:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b370:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b380:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b390:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3a0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b3b0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b3c0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b3d0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b3e0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b3f0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b400:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b410:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b420:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b430:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b440:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b450:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| Max diff block lines reached; 932970/956208 bytes (97.57%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 799, 38 lines modified | Offset 799, 38 lines modified | ||
| 799 | ··tags: | 799 | ··tags: |
| 800 | ··-·disable_strategy | 800 | ··-·disable_strategy |
| 801 | ··-·low_disruption | 801 | ··-·low_disruption |
| 802 | ··-·medium_complexity | 802 | ··-·medium_complexity |
| 803 | ··-·medium_severity | 803 | ··-·medium_severity |
| 804 | ··-·no_reboot_needed | 804 | ··-·no_reboot_needed |
| 805 | ··-·package_prelink_removed | 805 | ··-·package_prelink_removed |
| 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 811 | include·remove_prelink | ||
| 812 | class·remove_prelink·{ | ||
| 813 | ··package·{·'prelink': | ||
| 814 | ····ensure·=>·'purged', | ||
| 815 | ··} | ||
| 816 | } | ||
| 817 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 818 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 819 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 820 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 821 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 822 | if·[[·-f·/usr/sbin/prelink·]]; | 811 | if·[[·-f·/usr/sbin/prelink·]]; |
| 823 | then | 812 | then |
| 824 | prelink·-ua | 813 | prelink·-ua |
| 825 | fi | 814 | fi |
| 826 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 815 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 816 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 817 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 818 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 118534/123896 bytes (95.67%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15099, 168 lines modified | Offset 15099, 168 lines modified | ||
| 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003afa0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003afb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003afc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003afd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003afe0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003aff0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b000:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b010:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b020:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b030:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b040:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b050:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b060:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b070:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b080:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b090:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b0a0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b0b0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b0c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b0d0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b0e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b0f0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b100:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b110:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b010:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b020:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b030:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b040:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b050:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b060:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b070:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b080:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b090:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b0a0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b0b0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0c0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0d0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0f0:·2369·646d·3239·3033·2220·7461·6269·6e64··#idm2903"·tabind | |||
| 0003b100:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b110:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b120:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b130:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b140:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b150:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b160:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b170:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b180:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b190:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b1a0:·6964·6d32·3930·3322·3e3c·7461·626c·6520··idm2903"><table· | |||
| 0003b1b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b200:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b210:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b220:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b230:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b240:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b250:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b260:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b270:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b280:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b290:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b2a0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b2b0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b2c0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b2d0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b2e0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b2f0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b300:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b310:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b320:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b330:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b340:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b350:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b370:·5354·4947·2d55·4254·552d·3232·2d36·3531··STIG-UBTU-22-651 | |||
| 0003b380:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b140:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b150:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b160:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b170:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b180:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b190:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b1a0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b1b0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b1c0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b1d0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b1e0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b1f0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b200:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b210:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b220:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b230:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b240:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b250:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b260:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b270:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b280:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b290:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b2a0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b2b0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b | 0003b3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003b2d0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| Max diff block lines reached; 803274/826374 bytes (97.20%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·1·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level1_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 121, 14 lines modified | Offset 121, 19 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 124 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 125 | ············_\x8c_\x8i_\x8s············1.3.1 | 125 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 138 | ··package: |
| Offset 143, 44 lines modified | Offset 148, 39 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 150 | ··-·low_complexity |
| 146 | ··-·low_disruption | 151 | ··-·low_disruption |
| 147 | ··-·medium_severity | 152 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 172 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 162 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 173 | else | 163 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 165 | fi |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | include·install_aide | ||
| 172 | class·install_aide·{ | ||
| 173 | ··package·{·'aide': | ||
| 174 | ····ensure·=>·'installed', | ||
| 175 | ··} | ||
| 176 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·aideinit | 179 | $·sudo·aideinit |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 181 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 182 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 797, 38 lines modified | Offset 797, 38 lines modified | ||
| 797 | ··tags: | 797 | ··tags: |
| 798 | ··-·disable_strategy | 798 | ··-·disable_strategy |
| 799 | ··-·low_disruption | 799 | ··-·low_disruption |
| 800 | ··-·medium_complexity | 800 | ··-·medium_complexity |
| 801 | ··-·medium_severity | 801 | ··-·medium_severity |
| 802 | ··-·no_reboot_needed | 802 | ··-·no_reboot_needed |
| 803 | ··-·package_prelink_removed | 803 | ··-·package_prelink_removed |
| 804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 805 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 806 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 807 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 808 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 809 | include·remove_prelink | ||
| 810 | class·remove_prelink·{ | ||
| 811 | ··package·{·'prelink': | ||
| 812 | ····ensure·=>·'purged', | ||
| 813 | ··} | ||
| 814 | } | ||
| 815 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 804 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 816 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 805 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 817 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 806 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 818 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 807 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 819 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 808 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 820 | if·[[·-f·/usr/sbin/prelink·]]; | 809 | if·[[·-f·/usr/sbin/prelink·]]; |
| 821 | then | 810 | then |
| 822 | prelink·-ua | 811 | prelink·-ua |
| 823 | fi | 812 | fi |
| 824 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 813 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 814 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 815 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 816 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 105729/111101 bytes (95.16%) of diff not shown. | |||
| Offset 14284, 16 lines modified | Offset 14284, 16 lines modified | ||
| 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037cd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ce0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037cf0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d30:·2d30·3 | 00037d30:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037da0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15116, 168 lines modified | Offset 15116, 168 lines modified | ||
| 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | 0003b0b0:·7267·6574·3d22·2369·646d·3239·3032·2220··rget="#idm2902"· | ||
| 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b0c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b0d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b0e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b0f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b100:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b110:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b120:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b130:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b140:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b150:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b160:·2220·6964·3d22·6964·6d32·3930·3222·3e3c··"·id="idm2902">< | |||
| 0003b170:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b180:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b190:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b1a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b1c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b1f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b200:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b210:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b220:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003b120:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b130:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003b140:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b150:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b160:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b170:·6964·6d32·3930·3222·3e3c·7072·653e·3c63··idm2902"><pre><c | |||
| 0003b180:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003b190:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003b1a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003b1b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b1c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b1d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b1e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b1f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b200:·2369·646d·3239·3033·2220·7461·6269·6e64··#idm2903"·tabind | |||
| 0003b210:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b220:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b230:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b240:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b250:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b260:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b270:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b280:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b290:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b2a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b2b0:·6964·6d32·3930·3322·3e3c·7461·626c·6520··idm2903"><table· | |||
| 0003b2c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b2d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b2e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b2f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b300:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b310:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b320:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b330:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b340:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b350:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b360:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003b370:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b380:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b390:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b3a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b3b0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b3c0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b3d0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b3e0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b3f0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b400:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b410:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b420:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b430:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b440:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b450:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b460:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b470:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b480:·5354·4947·2d55·4254·552d·3232·2d36·3531··STIG-UBTU-22-651 | |||
| 0003b490:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b4a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b4b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b4c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b4d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b250:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b260:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b270:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b280:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b290:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b2a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b2b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b2c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b2d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b2e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b2f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b300:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b310:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b320:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b330:·2044·4953·412d·5354·4947·2d55·4254·552d···DISA-STIG-UBTU- | |||
| 0003b340:·3232·2d36·3531·3031·300a·2020·2d20·4e49··22-651010.··-·NI | |||
| 0003b350:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003b360:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003b370:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003b380:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003b390:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003b3a0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003b3b0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003b3c0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003b | 0003b4e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | ||
| 0003b3e0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| Max diff block lines reached; 1004404/1027504 bytes (97.75%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Server·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_server |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 124, 14 lines modified | Offset 124, 19 lines modified | ||
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 128 | ············_\x8c_\x8i_\x8s············1.3.1 | 128 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 140 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 141 | ··package: |
| Offset 146, 44 lines modified | Offset 151, 39 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | include·install_aide | ||
| 159 | class·install_aide·{ | ||
| 160 | ··package·{·'aide': | ||
| 161 | ····ensure·=>·'installed', | ||
| 162 | ··} | ||
| 163 | } | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 175 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 165 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 176 | else | 166 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 168 | fi |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·aideinit | 182 | $·sudo·aideinit |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 184 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 185 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 800, 38 lines modified | Offset 800, 38 lines modified | ||
| 800 | ··tags: | 800 | ··tags: |
| 801 | ··-·disable_strategy | 801 | ··-·disable_strategy |
| 802 | ··-·low_disruption | 802 | ··-·low_disruption |
| 803 | ··-·medium_complexity | 803 | ··-·medium_complexity |
| 804 | ··-·medium_severity | 804 | ··-·medium_severity |
| 805 | ··-·no_reboot_needed | 805 | ··-·no_reboot_needed |
| 806 | ··-·package_prelink_removed | 806 | ··-·package_prelink_removed |
| 807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 811 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 812 | include·remove_prelink | ||
| 813 | class·remove_prelink·{ | ||
| 814 | ··package·{·'prelink': | ||
| 815 | ····ensure·=>·'purged', | ||
| 816 | ··} | ||
| 817 | } | ||
| 818 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 819 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 820 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 821 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 822 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 811 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 823 | if·[[·-f·/usr/sbin/prelink·]]; | 812 | if·[[·-f·/usr/sbin/prelink·]]; |
| 824 | then | 813 | then |
| 825 | prelink·-ua | 814 | prelink·-ua |
| 826 | fi | 815 | fi |
| 827 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 816 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 817 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 818 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 819 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 126789/132152 bytes (95.94%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15111, 169 lines modified | Offset 15111, 169 lines modified | ||
| 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b060:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | 0003b070:·3d22·2369·646d·3239·3032·2220·7461·6269··="#idm2902"·tabi | ||
| 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b080:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b090:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b0d0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b0e0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b0f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b100:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b110:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b120:·3d22·6964·6d32·3930·3222·3e3c·7461·626c··="idm2902"><tabl | |||
| 0003b130:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b140:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b150:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b160:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b170:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b180:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b190:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1a0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1c0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1d0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b1e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003b0e0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b120:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b130:·3930·3222·3e3c·7072·653e·3c63·6f64·653e··902"><pre><code> | |||
| 0003b140:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b150:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b160:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b170:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b180:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b190:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b1a0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b1b0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b1c0:·3239·3033·2220·7461·6269·6e64·6578·3d22··2903"·tabindex=" | |||
| 0003b1d0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b1e0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b1f0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b200:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b210:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b220:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003b230:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b240:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b250:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b260:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 0003b270:·3930·3322·3e3c·7461·626c·6520·636c·6173··903"><table·clas | |||
| 0003b280:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b290:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b2a0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b2b0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b2c0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b2d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b2e0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b2f0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b300:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b310:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b | 0003b320:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003b210:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b220:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b230:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b240:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b250:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b260:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b270:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b280:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b290:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2a0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2b0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2c0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2d0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003b2e0:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b2f0:·412d·5354·4947·2d55·4254·552d·3232·2d36··A-STIG-UBTU-22-6 | |||
| 0003b300:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b310:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b320:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b330:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b340:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b350:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b360:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b370:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b380:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b390:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3a0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3 | 0003b330:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b340:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b350:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b360:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b370:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b380:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b390:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b3a0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b3b0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b3c0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b3d0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b3e0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b3f0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b400:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b410:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b420:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b430:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b440:·2d55·4254·552d·3232·2d36·3531·3031·300a··-UBTU-22-651010. | |||
| 0003b450:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b460:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b470:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b480:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| Max diff block lines reached; 979370/1002608 bytes (97.68%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Ubuntu·22.04·Level·2·Workstation·Benchmark |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_level2_workstation |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 41 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 49 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·aideinit | 181 | $·sudo·aideinit |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 799, 38 lines modified | Offset 799, 38 lines modified | ||
| 799 | ··tags: | 799 | ··tags: |
| 800 | ··-·disable_strategy | 800 | ··-·disable_strategy |
| 801 | ··-·low_disruption | 801 | ··-·low_disruption |
| 802 | ··-·medium_complexity | 802 | ··-·medium_complexity |
| 803 | ··-·medium_severity | 803 | ··-·medium_severity |
| 804 | ··-·no_reboot_needed | 804 | ··-·no_reboot_needed |
| 805 | ··-·package_prelink_removed | 805 | ··-·package_prelink_removed |
| 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 811 | include·remove_prelink | ||
| 812 | class·remove_prelink·{ | ||
| 813 | ··package·{·'prelink': | ||
| 814 | ····ensure·=>·'purged', | ||
| 815 | ··} | ||
| 816 | } | ||
| 817 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 818 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 807 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 819 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 808 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 820 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 809 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 821 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 810 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 822 | if·[[·-f·/usr/sbin/prelink·]]; | 811 | if·[[·-f·/usr/sbin/prelink·]]; |
| 823 | then | 812 | then |
| 824 | prelink·-ua | 813 | prelink·-ua |
| 825 | fi | 814 | fi |
| 826 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" | 815 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"prelink" |
| 816 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 817 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 818 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 122776/128149 bytes (95.81%) of diff not shown. | |||
| Offset 14288, 15 lines modified | Offset 14288, 15 lines modified | ||
| 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037cf0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d00:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d10:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d20:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d30:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d40:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d50:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d60:·6f66·2032·3032·3 | 00037d60:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d70:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037d80:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037d90:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037da0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037db0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037dc0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037dd0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 20022, 165 lines modified | Offset 20022, 165 lines modified | ||
| 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | 0004e350:·6172·6765·743d·2223·6964·6d31·3132·3736··arget="#idm11276 | ||
| 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004e360:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004e370:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004e380:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004e390:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004e3a0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004e3b0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004e3c0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0004e3d0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0004e3e0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0004e3f0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0004e400:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0004e410:·3d22·6964·6d31·3132·3736·223e·3c70·7265··="idm11276"><pre | |||
| 0004e420:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0004e430:·6573·5d5d·0a6e·616d·6520·3d20·2272·7379··es]].name·=·"rsy | |||
| 0004e440:·736c·6f67·220a·7665·7273·696f·6e20·3d20··slog".version·=· | |||
| 0004e450:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0004e460:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004e470:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004e3c0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0004e3d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004e3e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004e3f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004e400:·7365·2220·6964·3d22·6964·6d31·3132·3736··se"·id="idm11276 | |||
| 0004e410:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0004e420:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0004e430:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0004e440:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0004e450:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0004e460:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0004e470:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004e480:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004e490:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004e4a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0004e4b0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0004e4c0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0004e4d0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0004e4e0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0004e4f0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0004e500:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0004e510:·3a20·456e·7375·7265·2072·7379·736c·6f67··:·Ensure·rsyslog | |||
| 0004e520:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0004e530:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0004e540:·653a·2072·7379·736c·6f67·0a20·2020·2073··e:·rsyslog.····s | |||
| 0004e550:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0004e560:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0004e570:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0004e580:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0004e590:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0004e5a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0004e5b0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0004e5c0:·6773·3a0a·2020·2d20·4e49·5354·2d38·3030··gs:.··-·NIST-800 | |||
| 0004e5d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0004e5e0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0004e5f0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0004e600:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0004e610:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0004e620:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0004e630:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0004e640:·202d·2070·6163·6b61·6765·5f72·7379·736c···-·package_rsysl | |||
| 0004e650:·6f67·5f69·6e73·7461·6c6c·6564·0a3c·2f63··og_installed.</c | |||
| 0004e660:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0004e670:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0004e680:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0004e690:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0004e | 0004e480:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0004e490:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0004e4a0:·7267·6574·3d22·2369·646d·3131·3237·3722··rget="#idm11277" | |||
| 0004e4b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0004e4c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0004e4d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0004e4e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0004e4f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0004e500:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0004e510:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0004e520:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004e530:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004e540:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004e550:·6522·2069·643d·2269·646d·3131·3237·3722··e"·id="idm11277" | |||
| 0004e560:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0004e570:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0004e580:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0004e590:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0004e5a0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0004e5b0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0004e5c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004e5d0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0004e5e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004e5f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004e600:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0004e6b0:·6964·6d31·3132·3737·2220·7461·6269·6e64··idm11277"·tabind | |||
| 0004e6c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0004e6d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0004e6e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0004e6f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0004e700:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0004e710:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0004e720:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0004e730:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004e740:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004e750:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004e760:·646d·3131·3237·3722·3e3c·7461·626c·6520··dm11277"><table· | |||
| 0004e770:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004e780:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0004e790:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0004e7a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004e7b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004e7c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004e7d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004e7e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0004e7f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| Max diff block lines reached; 292224/314772 bytes (92.84%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Ubuntu·22.04 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 42 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1569, 14 lines modified | Offset 1569, 19 lines modified | ||
| 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1569 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1570 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1571 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1572 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1573 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1574 | ···························SRG-OS-000480-GPOS-00227 | 1574 | ···························SRG-OS-000480-GPOS-00227 |
| 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 | 1575 | ············_\x8c_\x8i_\x8s············4.2.2.1 |
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1577 | [[packages]] | ||
| 1578 | name·=·"rsyslog" | ||
| 1579 | version·=·"*" | ||
| 1576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1581 | -·name:·Ensure·rsyslog·is·installed | 1585 | -·name:·Ensure·rsyslog·is·installed |
| 1582 | ··package: | 1586 | ··package: |
| Offset 1588, 44 lines modified | Offset 1593, 39 lines modified | ||
| 1588 | ··-·NIST-800-53-CM-6(a) | 1593 | ··-·NIST-800-53-CM-6(a) |
| 1589 | ··-·enable_strategy | 1594 | ··-·enable_strategy |
| 1590 | ··-·low_complexity | 1595 | ··-·low_complexity |
| 1591 | ··-·low_disruption | 1596 | ··-·low_disruption |
| 1592 | ··-·medium_severity | 1597 | ··-·medium_severity |
| 1593 | ··-·no_reboot_needed | 1598 | ··-·no_reboot_needed |
| 1594 | ··-·package_rsyslog_installed | 1599 | ··-·package_rsyslog_installed |
| 1595 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1596 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1597 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1598 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1599 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1600 | include·install_rsyslog | ||
| 1601 | class·install_rsyslog·{ | ||
| 1602 | ··package·{·'rsyslog': | ||
| 1603 | ····ensure·=>·'installed', | ||
| 1604 | ··} | ||
| 1605 | } | ||
| 1606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1607 | [[packages]] | ||
| 1608 | name·=·"rsyslog" | ||
| 1609 | version·=·"*" | ||
| 1610 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1600 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1611 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1601 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1612 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1602 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1613 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1603 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1614 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1604 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1615 | #·Remediation·is·applicable·only·in·certain·platforms | 1605 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1616 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1606 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1617 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1607 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1618 | else | 1608 | else |
| 1619 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1609 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1620 | fi | 1610 | fi |
| 1611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1616 | include·install_rsyslog | ||
| 1617 | class·install_rsyslog·{ | ||
| 1618 | ··package·{·'rsyslog': | ||
| 1619 | ····ensure·=>·'installed', | ||
| 1620 | ··} | ||
| 1621 | } | ||
| 1621 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1622 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1622 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·22.04. | 1623 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Ubuntu·22.04. |
| 1623 | The·rsyslog·service·can·be·enabled·with·the·following·command: | 1624 | The·rsyslog·service·can·be·enabled·with·the·following·command: |
| 1624 | $·sudo·systemctl·enable·rsyslog.service | 1625 | $·sudo·systemctl·enable·rsyslog.service |
| 1625 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1626 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1626 | ············services,·which·are·essential·to·system·administration. | 1627 | ············services,·which·are·essential·to·system·administration. |
| 1627 | Severity: ··medium | 1628 | Severity: ··medium |
| Offset 1645, 14 lines modified | Offset 1645, 18 lines modified | ||
| 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1645 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1646 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1647 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1648 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1649 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 | 1650 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-652010 |
| 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 | 1651 | ············_\x8c_\x8i_\x8s············4.2.2.2 |
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1653 | [customizations.services] | ||
| 1654 | enabled·=·["rsyslog"] | ||
| 1652 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1653 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1654 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1655 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1656 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1659 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1657 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1660 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1658 | ··block: | 1661 | ··block: |
| Offset 1677, 31 lines modified | Offset 1681, 14 lines modified | ||
| 1677 | ··-·NIST-800-53-CM-6(a) | 1681 | ··-·NIST-800-53-CM-6(a) |
| 1678 | ··-·enable_strategy | 1682 | ··-·enable_strategy |
| 1679 | ··-·low_complexity | 1683 | ··-·low_complexity |
| 1680 | ··-·low_disruption | 1684 | ··-·low_disruption |
| 1681 | ··-·medium_severity | 1685 | ··-·medium_severity |
| 1682 | ··-·no_reboot_needed | 1686 | ··-·no_reboot_needed |
| 1683 | ··-·service_rsyslog_enabled | 1687 | ··-·service_rsyslog_enabled |
| 1684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1685 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1686 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1687 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1688 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1689 | include·enable_rsyslog | ||
| 1690 | class·enable_rsyslog·{ | ||
| Max diff block lines reached; 33106/38949 bytes (85.00%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d90:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037da0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037db0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037dc0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037dd0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037de0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037df0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e00:·2032·3032·3 | 00037e00:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e10:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e20:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e30:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e40:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e50:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e60:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e70:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15065, 169 lines modified | Offset 15065, 169 lines modified | ||
| 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ad80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | 0003ad90:·6964·6d32·3930·3222·2074·6162·696e·6465··idm2902"·tabinde | ||
| 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ada0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003adb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003adc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003add0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ade0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003adf0:·656d·6564·6961·7469·6f6e·204 | 0003adf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003ae00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ae10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ae20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ae30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ae40:·646d·3239·3032·223e·3c74·6162·6c65·2063··dm2902"><table·c | |||
| 0003ae50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ae60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ae70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ae80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ae90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003aea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003aeb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003aec0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003aed0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003aee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003aef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003af00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003ae00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ae10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae40:·7073·6522·2069·643d·2269·646d·3239·3032··pse"·id="idm2902 | |||
| 0003ae50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ae60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ae70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ae80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ae90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003aea0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003aeb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003aec0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003aed0:·2d74·6172·6765·743d·2223·6964·6d32·3930··-target="#idm290 | |||
| 0003aee0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003aef0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003af00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003af10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003af20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003af30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003af40:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003af50:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003af60:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003af70:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003af80:·7073·6522·2069·643d·2269·646d·3239·3033··pse"·id="idm2903 | |||
| 0003af90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003afa0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003afb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003afc0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003afd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003afe0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003af | 0003aff0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b000:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003af40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003af50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003af60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003af70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003af80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003af90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003afa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003afb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003afc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003afd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003afe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003b000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b010:·5449·472d·5542·5455·2d32·322d·3635·3130··TIG-UBTU-22-6510 | |||
| 0003b020:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b060:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b070:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b080:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b090:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b0a0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b0b0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b0c0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b0d0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b0e0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b0f0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b100:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b110:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b120:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b130:·6765·743d·2223·6964·6d32·3930·3322·2074··get="#idm2903"·t | |||
| 0003b140:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b150:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b160:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b170:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b180:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b190:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b1a0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b1b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b1d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b1e0:·6964·3d22·6964·6d32·3930·3322·3e3c·7461··id="idm2903"><ta | |||
| 0003b1f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b200:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b210:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b220:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b230:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b010:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b020:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b260:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b270:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| Max diff block lines reached; 462586/485686 bytes (95.24%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Canonical·Ubuntu·22.04·LTS·Security·Technical·Implementation |
| 42 | ··············Guide·(STIG)·V1R1 | 42 | ··············Guide·(STIG)·V1R1 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ | 45 | ····*·cpe:/o:canonical:ubuntu_linux:22.04::~~lts~~~ |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 53 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········UBTU-22-651010 |
| 117 | ············_\x8c_\x8i_\x8s············1.3.1 | 117 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 135, 44 lines modified | Offset 140, 39 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 154 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 165 | else | 155 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 157 | fi |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 169 | Run·the·following·command·to·generate·a·new·database: | 170 | Run·the·following·command·to·generate·a·new·database: |
| 170 | $·sudo·aideinit | 171 | $·sudo·aideinit |
| 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 172 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 173 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 173 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 174 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 174 | generated·database·can·be·installed·as·follows: | 175 | generated·database·can·be·installed·as·follows: |
| Offset 7852, 14 lines modified | Offset 7852, 19 lines modified | ||
| 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. | 7852 | ············construction·configuration·and·has·the·ability·to·limit·brute-force·attacks·on·the·system. |
| 7853 | Severity: ··medium | 7853 | Severity: ··medium |
| 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 7854 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 7855 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 7856 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 | 7857 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·UBTU-22-215010 |
| 7858 | ············_\x8c_\x8i_\x8s····5.4.1 | 7858 | ············_\x8c_\x8i_\x8s····5.4.1 |
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7860 | [[packages]] | ||
| 7861 | name·=·"libpam-pwquality" | ||
| 7862 | version·=·"*" | ||
| 7859 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7860 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7861 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7862 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7863 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7864 | -·name:·Gather·the·package·facts | 7868 | -·name:·Gather·the·package·facts |
| 7865 | ··package_facts: | 7869 | ··package_facts: |
| Offset 7882, 45 lines modified | Offset 7887, 40 lines modified | ||
| 7882 | ··-·DISA-STIG-UBTU-22-215010 | 7887 | ··-·DISA-STIG-UBTU-22-215010 |
| 7883 | ··-·enable_strategy | 7888 | ··-·enable_strategy |
| 7884 | ··-·low_complexity | 7889 | ··-·low_complexity |
| 7885 | ··-·low_disruption | 7890 | ··-·low_disruption |
| 7886 | ··-·medium_severity | 7891 | ··-·medium_severity |
| 7887 | ··-·no_reboot_needed | 7892 | ··-·no_reboot_needed |
| 7888 | ··-·package_pam_pwquality_installed | 7893 | ··-·package_pam_pwquality_installed |
| 7889 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7890 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7891 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7892 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7893 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7894 | include·install_libpam-pwquality | ||
| Max diff block lines reached; 57204/62955 bytes (90.86%) of diff not shown. | |||
| Offset 3, 2545 lines modified | Offset 3, 2545 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_var_log_syslog_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Verify· | 11 | ······<ocil:title>Verify·Permissions·on·/var/log/syslog·File</ocil:title> |
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_var_log_syslog_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Account·Lockouts·Must·Be·Logged</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-a | 19 | ········<ocil:test_action_ref>ocil:ssg-account_passwords_pam_faillock_audit_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-no | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_writable_hooks_ocil:questionnaire:1"> |
| 23 | ······<ocil:title> | 23 | ······<ocil:title>Disable·mutable·hooks</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-no | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_writable_hooks_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-partition_for_var_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure· | 29 | ······<ocil:title>Ensure·/var·Located·On·Separate·Partition</ocil:title> |
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-partition_for_var_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 34 | ····<ocil:questionnaire·id="ocil:ssg-service_chronyd_enabled_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>The·Chronyd·service·is·enabled</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-service_chronyd_enabled_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 40 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 41 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_stime_ocil:questionnaire:1"> |
| 47 | ······<ocil:title> | 47 | ······<ocil:title>Record·Attempts·to·Alter·Time·Through·stime</ocil:title> |
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_stime_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg- | 52 | ····<ocil:questionnaire·id="ocil:ssg-auditd_freq_ocil:questionnaire:1"> |
| 53 | ······<ocil:title> | 53 | ······<ocil:title>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</ocil:title> |
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-auditd_freq_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_limit_user_access_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>Limit·Users'·SSH·Access</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_limit_user_access_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_audit_ocil:questionnaire:1"> | ||
| 65 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_hibernation_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Disable·hibernation</ocil:title> | ||
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_hibernation_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv6_conf_all_disable_ipv6_ocil:questionnaire:1"> | ||
| 71 | ···· | 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>Ensure·Rsyslog·Encrypts·Off-Loaded·Audit·Records</ocil:title> | ||
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-sys | 73 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg- | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_postfix_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 77 | ······<ocil:title>The·Postfix·package·is·installed</ocil:title> |
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_postfix_installed_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_dac_modification_removexattr_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Record·Events·that·Modify·the·System's·Discretionary·Access·Controls·-·removexattr</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg-audit_ | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_dac_modification_removexattr_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_passwd_ocil:questionnaire:1"> | ||
| 89 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_x11_forwarding_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Enable·Encrypted·X11·Forwarding</ocil:title> | ||
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_x11_forwarding_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_sshd_private_key_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Permissions·on·SSH·Server·Private·*_key·Key·Files</ocil:title> |
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_sshd_private_key_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-account_passwords_pam_faillock_dir_ocil:questionnaire:1"> | ||
| 101 | ···· | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_net_ocil:questionnaire:1"> |
| 101 | ······<ocil:title>Enable·SSH·Warning·Banner</ocil:title> | ||
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_warning_banner_net_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-file_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_backup_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Verify· | 107 | ······<ocil:title>Verify·Permissions·on·Backup·shadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-file_ | 109 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-grub2_spec_store_bypass_disable_argument_ocil:questionnaire:1"> | ||
| 113 | ···· | 112 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Enable·Yama·support</ocil:title> | ||
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 115 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_yama_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> | ||
| 119 | ···· | 118 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_mail_alias_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>Configure·System·to·Forward·All·Mail·For·The·Root·Account</ocil:title> | ||
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-postfix_client_configure_mail_alias_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 122 | ······</ocil:actions> |
| Max diff block lines reached; 668252/680516 bytes (98.20%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-XENIAL"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·16.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·16.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 157 lines modified | Offset 72, 157 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_pam"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 93 | ········</cpe-lang:logical-test> | 83 | ········</cpe-lang:logical-test> |
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | 86 | ········</cpe-lang:logical-test> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_sud | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="grub2"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_iptables"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="machine"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_pam"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="package_ | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 135 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | ||
| 140 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="package_logrotate"> | 141 | ····<cpe-lang:platform·id="package_logrotate"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_ | 146 | ····<cpe-lang:platform·id="package_ntp"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="n | 151 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang: | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 155 | ········ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 156 | ········</cpe-lang:logical-test> | ||
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ········ | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 159 | ········</cpe-lang:logical-test> | ||
| 160 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 158 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 164 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg- | 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1604-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 167 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 168 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="not_ | 169 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 103606/117175 bytes (88.42%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU-BIONIC"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·18.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·18.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 181 lines modified | Offset 72, 181 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_pam"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 81 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 82 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 93 | ········</cpe-lang:logical-test> | 83 | ········</cpe-lang:logical-test> |
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 84 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 85 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | 86 | ········</cpe-lang:logical-test> |
| 97 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_ | 89 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 102 | ······</cpe-lang:logical-test> | ||
| 103 | ····</cpe-lang:platform> | ||
| 104 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="package_ntp"> | 100 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="machine_and_ | 111 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="grub2"> | 117 | ····<cpe-lang:platform·id="grub2"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="package_iptables"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | ||
| 136 | ····</cpe-lang:platform> | ||
| 137 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="machine"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_ | 132 | ····<cpe-lang:platform·id="package_pam"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 155 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 156 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 158 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 159 | ········</cpe-lang:logical-test> | 144 | ········</cpe-lang:logical-test> |
| 160 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_logrotate"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_ntp"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | ||
| 156 | ····</cpe-lang:platform> | ||
| 157 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu1804-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 172 | ······</cpe-lang:logical-test> | 162 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 163 | ····</cpe-lang:platform> |
| Max diff block lines reached; 110823/123498 bytes (89.74%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_20-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·20.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·20.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 309 lines modified | Offset 72, 309 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····</cpe-lang:platform> | ||
| 85 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 88 | ······</cpe-lang:logical-test> | ||
| 89 | ····</cpe-lang:platform> | ||
| 90 | ····<cpe-lang:platform·id="package_p | 79 | ····<cpe-lang:platform·id="package_apport"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | ||
| 94 | ····</cpe-lang:platform> | ||
| 95 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_apport:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="package_nftables"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 89 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 93 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 120 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | ||
| 124 | ····</cpe-lang:platform> | ||
| 125 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 105 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 112 | ········</cpe-lang:logical-test> | ||
| 133 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="not_aa | 126 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 148 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 129 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 149 | ········</cpe-lang:logical-test> | 130 | ········</cpe-lang:logical-test> |
| 150 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 131 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 151 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-p | 132 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 152 | ········</cpe-lang:logical-test> | 133 | ········</cpe-lang:logical-test> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | ||
| 155 | ····</cpe-lang:platform> | ||
| 156 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | ||
| 160 | ····</cpe-lang:platform> | ||
| 161 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 164 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="machine_and_ | 137 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 169 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 170 | ········</cpe-lang:logical-test> | ||
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 172 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="machine_and_ | 143 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2004-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 178 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 248832/261751 bytes (95.06%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UBUNTU_22-04"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Ubuntu·22.04</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of | 7 | configuration·settings·for·Ubuntu·22.04.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 327 lines modified | Offset 72, 327 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_ | 79 | ····<cpe-lang:platform·id="package_apport"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_apport:def:1"/> |
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····</cpe-lang:platform> | ||
| 85 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 88 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 89 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 90 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 94 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 95 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang: | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 103 | ········ | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 101 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 103 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 104 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 105 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="n | 111 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_g | 117 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 119 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 120 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> | ||
| 121 | ········</cpe-lang:logical-test> | ||
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 124 | ········</cpe-lang:logical-test> | ||
| 128 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="machine_and_ | 127 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 133 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="not_aa | 138 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 140 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 141 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 155 | ········</cpe-lang:logical-test> | 142 | ········</cpe-lang:logical-test> |
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 143 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 157 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-p | 144 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 158 | ········</cpe-lang:logical-test> | 145 | ········</cpe-lang:logical-test> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 160 | ······</cpe-lang:logical-test> | ||
| 161 | ····</cpe-lang:platform> | ||
| 162 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | ||
| 166 | ····</cpe-lang:platform> | ||
| 167 | ····<cpe-lang:platform·id="package_ufw"> | ||
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 170 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="machine_and_ | 149 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 176 | ········</cpe-lang:logical-test> | ||
| 177 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ubuntu2204-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> | ||
| 178 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 179 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| Max diff block lines reached; 258458/271994 bytes (95.02%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz | 2 | -rw-r--r--···0········0········0·····1976·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0··1230 | 3 | -rw-r--r--···0········0········0··1230784·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20540, 165 lines modified | Offset 20540, 165 lines modified | ||
| 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | 000503b0:·7461·7267·6574·3d22·2369·646d·3533·3531··target="#idm5351 | ||
| 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000503c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000503d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000503e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000503f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00050400:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00050410:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00050420:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 00050420:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00050430:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00050440:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00050450:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00050460:·7365·2220·6964·3d22·6964·6d35·3335·3122··se"·id="idm5351" | |||
| 00050470:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00050480:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00050490:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000504a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000504b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000504c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000504d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000504e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000504f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00050500:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00050510:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00050520:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00050530:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00050540:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00050550:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00050560:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00050570:·2045·6e73·7572·6520·7379·736c·6f67·2d6e···Ensure·syslog-n | |||
| 00050580:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 00050590:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 000505a0:·6d65·3a20·7379·736c·6f67·2d6e·670a·2020··me:·syslog-ng.·· | |||
| 000505b0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 000505c0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000505d0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000505e0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000505f0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00050600:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00050610:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00050620:·2074·6167·733a·0a20·202d·204e·4953·542d···tags:.··-·NIST- | |||
| 00050630:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 00050640:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 00050650:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 00050660:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 00050670:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 00050680:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 00050690:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 000506a0:·640a·2020·2d20·7061·636b·6167·655f·7379··d.··-·package_sy | |||
| 000506b0:·736c·6f67·6e67·5f69·6e73·7461·6c6c·6564··slogng_installed | |||
| 000506c0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000506d0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000506e0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000506f0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00050700:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00050710:·743d·2223·6964·6d35·3335·3222·2074·6162··t="#idm5352"·tab | |||
| 00050720:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00050730:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00050740:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00050750:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00050760:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00050770:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00050 | 00050430:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 00050 | 00050440:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 00050 | 00050450:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 00050 | 00050460:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 00050 | 00050470:·3d22·6964·6d35·3335·3122·3e3c·7072·653e··="idm5351"><pre> | ||
| 00050480:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00050490:·735d·5d0a·6e61·6d65·203d·2022·7379·736c··s]].name·=·"sysl | |||
| 000504a0:·6f67·2d6e·6722·0a76·6572·7369·6f6e·203d··og-ng".version·= | |||
| 000507d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000507e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000507f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00050800:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00050810:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00050820:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00050830:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00050840:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00050850:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00050860:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00050870:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00050880:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00050890:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 000508a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 000508b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 000508c0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 000508d0:·6c6c·5f73·7973·6c6f·672d·6e67·0a0a·636c··ll_syslog-ng..cl | |||
| 000508e0:·6173·7320·696e·7374·616c·6c5f·7379·736c··ass·install_sysl | |||
| 000508f0:·6f67·2d6e·6720·7b0a·2020·7061·636b·6167··og-ng·{.··packag | |||
| 00050900:·6520·7b20·2773·7973·6c6f·672d·6e67·273a··e·{·'syslog-ng': | |||
| 00050910:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 00050920:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 00050 | 000504b0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | ||
| 00050 | 000504c0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | ||
| 00050 | 000504d0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | ||
| 00050 | 000504e0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | ||
| 00050 | 000504f0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | ||
| 00050 | 00050500:·6172·6765·743d·2223·6964·6d35·3335·3222··arget="#idm5352" | ||
| 00050 | 00050510:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00050 | 00050520:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00050 | 00050530:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00050 | 00050540:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00050 | 00050550:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 00050 | 00050560:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 000509f0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 00050 | 00050570:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 00050580:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00050590:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000505a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000505b0:·6522·2069·643d·2269·646d·3533·3532·223e··e"·id="idm5352"> | |||
| 000505c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| Max diff block lines reached; 138104/160652 bytes (85.96%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | -·name:·Ensure·syslog-ng·is·installed | 1731 | -·name:·Ensure·syslog-ng·is·installed |
| 1728 | ··package: | 1732 | ··package: |
| Offset 1734, 44 lines modified | Offset 1739, 39 lines modified | ||
| 1734 | ··-·NIST-800-53-CM-6(a) | 1739 | ··-·NIST-800-53-CM-6(a) |
| 1735 | ··-·enable_strategy | 1740 | ··-·enable_strategy |
| 1736 | ··-·low_complexity | 1741 | ··-·low_complexity |
| 1737 | ··-·low_disruption | 1742 | ··-·low_disruption |
| 1738 | ··-·medium_severity | 1743 | ··-·medium_severity |
| 1739 | ··-·no_reboot_needed | 1744 | ··-·no_reboot_needed |
| 1740 | ··-·package_syslogng_installed | 1745 | ··-·package_syslogng_installed |
| 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1742 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1743 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1744 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1745 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1746 | include·install_syslog-ng | ||
| 1747 | class·install_syslog-ng·{ | ||
| 1748 | ··package·{·'syslog-ng': | ||
| 1749 | ····ensure·=>·'installed', | ||
| 1750 | ··} | ||
| 1751 | } | ||
| 1752 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1753 | [[packages]] | ||
| 1754 | name·=·"syslog-ng" | ||
| 1755 | version·=·"*" | ||
| 1756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1746 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1747 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1748 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1749 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1750 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1761 | #·Remediation·is·applicable·only·in·certain·platforms | 1751 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1762 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1752 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1763 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1753 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1764 | else | 1754 | else |
| 1765 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1755 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1766 | fi | 1756 | fi |
| 1757 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1758 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1759 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1760 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1761 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1762 | include·install_syslog-ng | ||
| 1763 | class·install_syslog-ng·{ | ||
| 1764 | ··package·{·'syslog-ng': | ||
| 1765 | ····ensure·=>·'installed', | ||
| 1766 | ··} | ||
| 1767 | } | ||
| 1767 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1768 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1768 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1769 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1769 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1770 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1770 | command: | 1771 | command: |
| 1771 | $·sudo·systemctl·enable·syslog-ng.service | 1772 | $·sudo·systemctl·enable·syslog-ng.service |
| 1772 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1773 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1773 | ············services,·which·are·essential·to·system·administration. | 1774 | ············services,·which·are·essential·to·system·administration. |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1831, 18 lines modified | Offset 1835, 14 lines modified | ||
| 1831 | class·enable_syslog-ng·{ | 1835 | class·enable_syslog-ng·{ |
| 1832 | ··service·{'syslog-ng': | 1836 | ··service·{'syslog-ng': |
| 1833 | ····enable·=>·true, | 1837 | ····enable·=>·true, |
| 1834 | ····ensure·=>·'running', | 1838 | ····ensure·=>·'running', |
| 1835 | ··} | 1839 | ··} |
| 1836 | } | 1840 | } |
| 1837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1838 | [customizations.services] | ||
| 1839 | enabled·=·["syslog-ng"] | ||
| 1840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1841 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1841 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 1842 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 1842 | following·command: | 1843 | following·command: |
| 1843 | ·$·apt-get·install·rsyslog | 1844 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 17255/23106 bytes (74.68%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21115, 166 lines modified | Offset 21115, 166 lines modified | ||
| 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000527a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | 000527b0:·2369·646d·3533·3531·2220·7461·6269·6e64··#idm5351"·tabind | ||
| 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 000527c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 000527d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 000527e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 000527f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00052800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00052810:·5265·6d65·6469·6174·696f·6e20·4 | 00052810:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00052820:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 00052820:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00052830:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00052840:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00052850:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00052860:·6964·6d35·3335·3122·3e3c·7461·626c·6520··idm5351"><table· | |||
| 00052870:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00052880:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00052890:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000528a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000528b0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 000528c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000528d0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 000528e0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 000528f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00052900:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00052910:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00052920:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00052930:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00052940:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00052950:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00052960:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00052970:·7379·736c·6f67·2d6e·6720·6973·2069·6e73··syslog-ng·is·ins | |||
| 00052980:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 00052990:·3a0a·2020·2020·6e61·6d65·3a20·7379·736c··:.····name:·sysl | |||
| 000529a0:·6f67·2d6e·670a·2020·2020·7374·6174·653a··og-ng.····state: | |||
| 000529b0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 000529c0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 000529d0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000529e0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000529f0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00052a00:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00052a10:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 00052a20:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00052a30:·4d2d·3628·6129·0a20·202d·2065·6e61·626c··M-6(a).··-·enabl | |||
| 00052a40:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 00052a50:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 00052a60:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 00052a70:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00052a80:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00052a90:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00052aa0:·636b·6167·655f·7379·736c·6f67·6e67·5f69··ckage_syslogng_i | |||
| 00052ab0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00052ac0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00052ad0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00052ae0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00052af0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00052b00:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 00052b10:·3335·3222·2074·6162·696e·6465·783d·2230··352"·tabindex="0 | |||
| 00052b20:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00052b30:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00052b40:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00052b50:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00052b60:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00052b70:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00052 | 00052830:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 00052 | 00052840:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 00052 | 00052850:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 00052 | 00052860:·6170·7365·2220·6964·3d22·6964·6d35·3335··apse"·id="idm535 | ||
| 00052870:·3122·3e3c·7072·653e·3c63·6f64·653e·0a5b··1"><pre><code>.[ | |||
| 00052880:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 00052890:·203d·2022·7379·736c·6f67·2d6e·6722·0a76···=·"syslog-ng".v | |||
| 000528a0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00052bc0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 00052bd0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00052be0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00052bf0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00052c00:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00052c10:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00052c20:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00052c30:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00052c40:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00052c50:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00052c60:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00052c70:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00052c80:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00052c90:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00052ca0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00052cb0:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 00052cc0:·6465·2069·6e73·7461·6c6c·5f73·7973·6c6f··de·install_syslo | |||
| 00052cd0:·672d·6e67·0a0a·636c·6173·7320·696e·7374··g-ng..class·inst | |||
| 00052ce0:·616c·6c5f·7379·736c·6f67·2d6e·6720·7b0a··all_syslog-ng·{. | |||
| 00052cf0:·2020·7061·636b·6167·6520·7b20·2773·7973····package·{·'sys | |||
| 00052d00:·6c6f·672d·6e67·273a·0a20·2020·2065·6e73··log-ng':.····ens | |||
| 00052d10:·7572·6520·3d26·6774·3b20·2769·6e73·7461··ure·=>·'insta | |||
| 00052d20:·6c6c·6564·272c·0a20·207d·0a7d·0a3c·2f63··lled',.··}.}.</c | |||
| 00052 | 000528b0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 00052 | 000528c0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 00052 | 000528d0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 00052 | 000528e0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 00052 | 000528f0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00052 | 00052900:·6964·6d35·3335·3222·2074·6162·696e·6465··idm5352"·tabinde | ||
| 00052 | 00052910:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00052 | 00052920:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00052 | 00052930:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00052 | 00052940:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00052 | 00052950:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00052 | 00052960:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 00052 | 00052970:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 00052980:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00052990:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000529a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| Max diff block lines reached; 229158/251982 bytes (90.94%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | -·name:·Ensure·syslog-ng·is·installed | 1907 | -·name:·Ensure·syslog-ng·is·installed |
| 1904 | ··package: | 1908 | ··package: |
| Offset 1910, 44 lines modified | Offset 1915, 39 lines modified | ||
| 1910 | ··-·NIST-800-53-CM-6(a) | 1915 | ··-·NIST-800-53-CM-6(a) |
| 1911 | ··-·enable_strategy | 1916 | ··-·enable_strategy |
| 1912 | ··-·low_complexity | 1917 | ··-·low_complexity |
| 1913 | ··-·low_disruption | 1918 | ··-·low_disruption |
| 1914 | ··-·medium_severity | 1919 | ··-·medium_severity |
| 1915 | ··-·no_reboot_needed | 1920 | ··-·no_reboot_needed |
| 1916 | ··-·package_syslogng_installed | 1921 | ··-·package_syslogng_installed |
| 1917 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1918 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1919 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1920 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1921 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1922 | include·install_syslog-ng | ||
| 1923 | class·install_syslog-ng·{ | ||
| 1924 | ··package·{·'syslog-ng': | ||
| 1925 | ····ensure·=>·'installed', | ||
| 1926 | ··} | ||
| 1927 | } | ||
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1929 | [[packages]] | ||
| 1930 | name·=·"syslog-ng" | ||
| 1931 | version·=·"*" | ||
| 1932 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1933 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1934 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1935 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1936 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1937 | #·Remediation·is·applicable·only·in·certain·platforms | 1927 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1938 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1928 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1939 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1929 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1940 | else | 1930 | else |
| 1941 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1931 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1942 | fi | 1932 | fi |
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1934 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1935 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1936 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1937 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1938 | include·install_syslog-ng | ||
| 1939 | class·install_syslog-ng·{ | ||
| 1940 | ··package·{·'syslog-ng': | ||
| 1941 | ····ensure·=>·'installed', | ||
| 1942 | ··} | ||
| 1943 | } | ||
| 1943 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1944 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1944 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1945 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1945 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1946 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1946 | command: | 1947 | command: |
| 1947 | $·sudo·systemctl·enable·syslog-ng.service | 1948 | $·sudo·systemctl·enable·syslog-ng.service |
| 1948 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1949 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1949 | ············services,·which·are·essential·to·system·administration. | 1950 | ············services,·which·are·essential·to·system·administration. |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 2007, 18 lines modified | Offset 2011, 14 lines modified | ||
| 2007 | class·enable_syslog-ng·{ | 2011 | class·enable_syslog-ng·{ |
| 2008 | ··service·{'syslog-ng': | 2012 | ··service·{'syslog-ng': |
| 2009 | ····enable·=>·true, | 2013 | ····enable·=>·true, |
| 2010 | ····ensure·=>·'running', | 2014 | ····ensure·=>·'running', |
| 2011 | ··} | 2015 | ··} |
| 2012 | } | 2016 | } |
| 2013 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2014 | [customizations.services] | ||
| 2015 | enabled·=·["syslog-ng"] | ||
| 2016 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2017 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2017 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 2018 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 2018 | following·command: | 2019 | following·command: |
| 2019 | ·$·apt-get·install·rsyslog | 2020 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 26510/32366 bytes (81.91%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15651, 166 lines modified | Offset 15651, 166 lines modified | ||
| 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003d220:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | 0003d230:·743d·2223·6964·6d35·3335·3122·2074·6162··t="#idm5351"·tab | ||
| 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003d240:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003d250:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003d260:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003d270:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003d280:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003d290:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003d2a0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003d2a0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003d2b0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003d2c0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003d2d0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003d2e0:·643d·2269·646d·3533·3531·223e·3c74·6162··d="idm5351"><tab | |||
| 0003d2f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003d300:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003d310:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003d320:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003d330:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003d340:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003d350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003d360:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d370:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003d380:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003d390:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003d3a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003d3b0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003d3c0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003d3d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003d3e0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003d3f0:·7265·2073·7973·6c6f·672d·6e67·2069·7320··re·syslog-ng·is· | |||
| 0003d400:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003d410:·6167·653a·0a20·2020·206e·616d·653a·2073··age:.····name:·s | |||
| 0003d420:·7973·6c6f·672d·6e67·0a20·2020·2073·7461··yslog-ng.····sta | |||
| 0003d430:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003d440:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003d450:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003d460:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003d470:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003d480:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003d490:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003d4a0:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d35··:.··-·NIST-800-5 | |||
| 0003d4b0:·332d·434d·2d36·2861·290a·2020·2d20·656e··3-CM-6(a).··-·en | |||
| 0003d4c0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003d4d0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003d4e0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003d4f0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003d500:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003d510:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003d520:·2070·6163·6b61·6765·5f73·7973·6c6f·676e···package_syslogn | |||
| 0003d530:·675f·696e·7374·616c·6c65·640a·3c2f·636f··g_installed.</co | |||
| 0003d540:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d550:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d560:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d570:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d580:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d590:·646d·3533·3532·2220·7461·6269·6e64·6578··dm5352"·tabindex | |||
| 0003d5a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d5b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d5c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d5d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d5e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d5f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003d | 0003d2b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0003d | 0003d2c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003d | 0003d2d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003d | 0003d2e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003d2f0:·3533·3531·223e·3c70·7265·3e3c·636f·6465··5351"><pre><code | |||
| 0003d300:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003d310:·616d·6520·3d20·2273·7973·6c6f·672d·6e67··ame·=·"syslog-ng | |||
| 0003d320:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003d640:·3533·3532·223e·3c74·6162·6c65·2063·6c61··5352"><table·cla | |||
| 0003d650:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003d660:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003d670:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003d680:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003d690:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003d6a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003d6b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003d6c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003d6d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003d6e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003d6f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003d700:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003d710:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003d720:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003d730:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003d740:·636c·7564·6520·696e·7374·616c·6c5f·7379··clude·install_sy | |||
| 0003d750:·736c·6f67·2d6e·670a·0a63·6c61·7373·2069··slog-ng..class·i | |||
| 0003d760:·6e73·7461·6c6c·5f73·7973·6c6f·672d·6e67··nstall_syslog-ng | |||
| 0003d770:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003d780:·7379·736c·6f67·2d6e·6727·3a0a·2020·2020··syslog-ng':.···· | |||
| 0003d790:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003d7a0:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003d | 0003d330:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003d | 0003d340:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003d | 0003d350:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003d | 0003d360:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003d | 0003d370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003d | 0003d380:·3d22·2369·646d·3533·3532·2220·7461·6269··="#idm5352"·tabi | ||
| 0003d | 0003d390:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003d | 0003d3a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003d | 0003d3b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003d | 0003d3c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003d | 0003d3d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003d | 0003d3e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003d | 0003d3f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003d400:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003d410:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003d420:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003d430:·3d22·6964·6d35·3335·3222·3e3c·7461·626c··="idm5352"><tabl | |||
| Max diff block lines reached; 104654/127340 bytes (82.18%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:11 | 40 | ····*·cpe:/o:debian:debian_linux:11 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | -·name:·Ensure·syslog-ng·is·installed | 292 | -·name:·Ensure·syslog-ng·is·installed |
| 289 | ··package: | 293 | ··package: |
| Offset 295, 44 lines modified | Offset 300, 39 lines modified | ||
| 295 | ··-·NIST-800-53-CM-6(a) | 300 | ··-·NIST-800-53-CM-6(a) |
| 296 | ··-·enable_strategy | 301 | ··-·enable_strategy |
| 297 | ··-·low_complexity | 302 | ··-·low_complexity |
| 298 | ··-·low_disruption | 303 | ··-·low_disruption |
| 299 | ··-·medium_severity | 304 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 301 | ··-·package_syslogng_installed | 306 | ··-·package_syslogng_installed |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 307 | include·install_syslog-ng | ||
| 308 | class·install_syslog-ng·{ | ||
| 309 | ··package·{·'syslog-ng': | ||
| 310 | ····ensure·=>·'installed', | ||
| 311 | ··} | ||
| 312 | } | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 314 | [[packages]] | ||
| 315 | name·=·"syslog-ng" | ||
| 316 | version·=·"*" | ||
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | 312 | #·Remediation·is·applicable·only·in·certain·platforms |
| 323 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 313 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 324 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 314 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 325 | else | 315 | else |
| 326 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 316 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 327 | fi | 317 | fi |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 323 | include·install_syslog-ng | ||
| 324 | class·install_syslog-ng·{ | ||
| 325 | ··package·{·'syslog-ng': | ||
| 326 | ····ensure·=>·'installed', | ||
| 327 | ··} | ||
| 328 | } | ||
| 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 329 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 329 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 330 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 330 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 331 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 331 | command: | 332 | command: |
| 332 | $·sudo·systemctl·enable·syslog-ng.service | 333 | $·sudo·systemctl·enable·syslog-ng.service |
| 333 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 334 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 334 | ············services,·which·are·essential·to·system·administration. | 335 | ············services,·which·are·essential·to·system·administration. |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 392, 18 lines modified | Offset 396, 14 lines modified | ||
| 392 | class·enable_syslog-ng·{ | 396 | class·enable_syslog-ng·{ |
| 393 | ··service·{'syslog-ng': | 397 | ··service·{'syslog-ng': |
| 394 | ····enable·=>·true, | 398 | ····enable·=>·true, |
| 395 | ····ensure·=>·'running', | 399 | ····ensure·=>·'running', |
| 396 | ··} | 400 | ··} |
| 397 | } | 401 | } |
| 398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 399 | [customizations.services] | ||
| 400 | enabled·=·["syslog-ng"] | ||
| 401 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 402 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 402 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 403 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 403 | following·command: | 404 | following·command: |
| 404 | ·$·apt-get·install·rsyslog | 405 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 12271/18099 bytes (67.80%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20551, 165 lines modified | Offset 20551, 165 lines modified | ||
| 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | 00050460:·6574·3d22·2369·646d·3533·3531·2220·7461··et="#idm5351"·ta | ||
| 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00050470:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00050480:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00050490:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 000504a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 000504b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 000504c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000504d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 000504d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000504e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000504f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00050500:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00050510:·6964·3d22·6964·6d35·3335·3122·3e3c·7461··id="idm5351"><ta | |||
| 00050520:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00050530:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00050540:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00050550:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00050560:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00050570:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00050580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00050590:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000505a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000505b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000505c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000505d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000505e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000505f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00050600:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00050610:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 00050620:·7572·6520·7379·736c·6f67·2d6e·6720·6973··ure·syslog-ng·is | |||
| 00050630:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00050640:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00050650:·7379·736c·6f67·2d6e·670a·2020·2020·7374··syslog-ng.····st | |||
| 00050660:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00050670:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00050680:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00050690:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000506a0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000506b0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000506c0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000506d0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 000506e0:·3533·2d43·4d2d·3628·6129·0a20·202d·2065··53-CM-6(a).··-·e | |||
| 000506f0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00050700:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00050710:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00050720:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00050730:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00050740:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00050750:·2d20·7061·636b·6167·655f·7379·736c·6f67··-·package_syslog | |||
| 00050760:·6e67·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ng_installed.</c | |||
| 00050770:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00050780:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00050790:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 000507a0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 000507b0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 000507c0:·6964·6d35·3335·3222·2074·6162·696e·6465··idm5352"·tabinde | |||
| 000507d0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 000507e0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 000507f0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00050800:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00050810:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00050820:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 00050 | 000504e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 00050 | 000504f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 00050 | 00050500:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 00050 | 00050510:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 00050520:·6d35·3335·3122·3e3c·7072·653e·3c63·6f64··m5351"><pre><cod | |||
| 00050530:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 00050540:·6e61·6d65·203d·2022·7379·736c·6f67·2d6e··name·=·"syslog-n | |||
| 00050550:·6722·0a76·6572·7369·6f6e·203d·2022·2a22··g".version·=·"*" | |||
| 00050870:·6d35·3335·3222·3e3c·7461·626c·6520·636c··m5352"><table·cl | |||
| 00050880:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00050890:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000508a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000508b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000508c0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000508d0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000508e0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 000508f0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00050900:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00050910:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00050920:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00050930:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00050940:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00050950:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00050960:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 00050970:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f73··nclude·install_s | |||
| 00050980:·7973·6c6f·672d·6e67·0a0a·636c·6173·7320··yslog-ng..class· | |||
| 00050990:·696e·7374·616c·6c5f·7379·736c·6f67·2d6e··install_syslog-n | |||
| 000509a0:·6720·7b0a·2020·7061·636b·6167·6520·7b20··g·{.··package·{· | |||
| 000509b0:·2773·7973·6c6f·672d·6e67·273a·0a20·2020··'syslog-ng':.··· | |||
| 000509c0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 000509d0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 00050 | 00050560:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 00050 | 00050570:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 00050 | 00050580:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 00050 | 00050590:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 00050 | 000505a0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00050 | 000505b0:·743d·2223·6964·6d35·3335·3222·2074·6162··t="#idm5352"·tab | ||
| 00050 | 000505c0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00050 | 000505d0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00050 | 000505e0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00050 | 000505f0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00050 | 00050600:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00050 | 00050610:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00050 | 00050620:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | ||
| 00050630:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00050640:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00050650:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00050660:·643d·2269·646d·3533·3532·223e·3c74·6162··d="idm5352"><tab | |||
| 00050670:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| Max diff block lines reached; 229020/251568 bytes (91.04%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:11 | 41 | ····*·cpe:/o:debian:debian_linux:11 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | -·name:·Ensure·syslog-ng·is·installed | 1733 | -·name:·Ensure·syslog-ng·is·installed |
| 1730 | ··package: | 1734 | ··package: |
| Offset 1736, 44 lines modified | Offset 1741, 39 lines modified | ||
| 1736 | ··-·NIST-800-53-CM-6(a) | 1741 | ··-·NIST-800-53-CM-6(a) |
| 1737 | ··-·enable_strategy | 1742 | ··-·enable_strategy |
| 1738 | ··-·low_complexity | 1743 | ··-·low_complexity |
| 1739 | ··-·low_disruption | 1744 | ··-·low_disruption |
| 1740 | ··-·medium_severity | 1745 | ··-·medium_severity |
| 1741 | ··-·no_reboot_needed | 1746 | ··-·no_reboot_needed |
| 1742 | ··-·package_syslogng_installed | 1747 | ··-·package_syslogng_installed |
| 1743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1744 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1745 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1746 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1747 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1748 | include·install_syslog-ng | ||
| 1749 | class·install_syslog-ng·{ | ||
| 1750 | ··package·{·'syslog-ng': | ||
| 1751 | ····ensure·=>·'installed', | ||
| 1752 | ··} | ||
| 1753 | } | ||
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1755 | [[packages]] | ||
| 1756 | name·=·"syslog-ng" | ||
| 1757 | version·=·"*" | ||
| 1758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1748 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1749 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1760 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1750 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1761 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1751 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1762 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1752 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1763 | #·Remediation·is·applicable·only·in·certain·platforms | 1753 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1764 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1754 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1765 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1755 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1766 | else | 1756 | else |
| 1767 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1757 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1768 | fi | 1758 | fi |
| 1759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1764 | include·install_syslog-ng | ||
| 1765 | class·install_syslog-ng·{ | ||
| 1766 | ··package·{·'syslog-ng': | ||
| 1767 | ····ensure·=>·'installed', | ||
| 1768 | ··} | ||
| 1769 | } | ||
| 1769 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1770 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1770 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1771 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1771 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1772 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1772 | command: | 1773 | command: |
| 1773 | $·sudo·systemctl·enable·syslog-ng.service | 1774 | $·sudo·systemctl·enable·syslog-ng.service |
| 1774 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1775 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1775 | ············services,·which·are·essential·to·system·administration. | 1776 | ············services,·which·are·essential·to·system·administration. |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1833, 18 lines modified | Offset 1837, 14 lines modified | ||
| 1833 | class·enable_syslog-ng·{ | 1837 | class·enable_syslog-ng·{ |
| 1834 | ··service·{'syslog-ng': | 1838 | ··service·{'syslog-ng': |
| 1835 | ····enable·=>·true, | 1839 | ····enable·=>·true, |
| 1836 | ····ensure·=>·'running', | 1840 | ····ensure·=>·'running', |
| 1837 | ··} | 1841 | ··} |
| 1838 | } | 1842 | } |
| 1839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1840 | [customizations.services] | ||
| 1841 | enabled·=·["syslog-ng"] | ||
| 1842 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1843 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1843 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 1844 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 1844 | following·command: | 1845 | following·command: |
| 1845 | ·$·apt-get·install·rsyslog | 1846 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 26510/32354 bytes (81.94%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19680, 165 lines modified | Offset 19680, 165 lines modified | ||
| 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0004cdf0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | 0004ce00:·743d·2223·6964·6d34·3831·3222·2074·6162··t="#idm4812"·tab | ||
| 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0004ce10:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0004ce20:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0004ce30:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0004ce40:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0004ce50:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0004ce60:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0004ce70:· | 0004ce70:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0004ce80:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004ce90:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004cea0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004ceb0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004cec0:·3438·3132·223e·3c70·7265·3e3c·636f·6465··4812"><pre><code | |||
| 0004ced0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0004cee0:·616d·6520·3d20·2272·7379·736c·6f67·220a··ame·=·"rsyslog". | |||
| 0004cef0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0004cf00:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0004cf10:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0004cf20:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0004cf30:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0004cf40:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0004cf50:·2369·646d·3438·3133·2220·7461·6269·6e64··#idm4813"·tabind | |||
| 0004cf60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0004cf70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0004cf80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0004cf90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0004cfa0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0004cfb0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0004cfc0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0004cfd0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004cfe0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004cff0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d000:·6964·6d34·3831·3322·3e3c·7461·626c·6520··idm4813"><table· | |||
| 0004d010:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0004d020:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0004d030:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0004d040:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0004d050:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0004d060:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004d070:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0004d080:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0004d090:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004d0a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0004d0b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0004d0c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0004d0d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0004d0e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0004d0f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0004d100:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0004d110:·7273·7973·6c6f·6720·6973·2069·6e73·7461··rsyslog·is·insta | |||
| 0004d120:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0004d130:·2020·2020·6e61·6d65·3a20·7273·7973·6c6f······name:·rsyslo | |||
| 0004d140:·670a·2020·2020·7374·6174·653a·2070·7265··g.····state:·pre | |||
| 0004d150:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0004d160:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0004d170:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0004d180:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0004d190:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0004d1a0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0004d1b0:·225d·0a20·2074·6167·733a·0a20·202d·204e··"].··tags:.··-·N | |||
| 0004d1c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0004d1d0:·6129·0a20·202d·2065·6e61·626c·655f·7374··a).··-·enable_st | |||
| 0004d1e0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004d1f0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004d200:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004d210:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004d220:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004d230:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0004d240:·655f·7273·7973·6c6f·675f·696e·7374·616c··e_rsyslog_instal | |||
| 0004d250:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0004d260:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0004d270:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0004d280:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0004d290:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0004d2a0:·7267·6574·3d22·2369·646d·3438·3134·2220··rget="#idm4814"· | |||
| 0004d2b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0004d2c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0004d2d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0004d2e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0004d2f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0004d300:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0004d310:·6e20·5368·656c·6c20·7363·7269·7074·20e2··n·Shell·script·. | |||
| 0004 | 0004d320:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0004 | 0004d330:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0004 | 0004d340:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0004 | 0004d350:·643d·2269·646d·3438·3134·223e·3c74·6162··d="idm4814"><tab | ||
| 0004 | 0004d360:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 0004 | 0004d370:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 0004 | 0004d380:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 0004 | 0004d390:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 0004 | 0004d3a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 0004 | 0004d3b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0004 | 0004d3c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0004 | 0004d3d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 0004 | 0004d3e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0004 | 0004d3f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0004 | 0004d400:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0004 | 0004d410:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0004 | 0004d420:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0004 | 0004d430:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 0004 | 0004d440:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0004cfb0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0004cfc0:·7265·2072·7379·736c·6f67·2069·7320·696e··re·rsyslog·is·in | |||
| 0004cfd0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0004cfe0:·653a·0a20·2020·206e·616d·653a·2072·7379··e:.····name:·rsy | |||
| 0004cff0:·736c·6f67·0a20·2020·2073·7461·7465·3a20··slog.····state:· | |||
| 0004d000:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0004d010:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004d020:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004d030:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| Max diff block lines reached; 206774/229322 bytes (90.17%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·11 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:11 | 42 | ····*·cpe:/o:debian:debian_linux:11 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | -·name:·Ensure·rsyslog·is·installed | 1547 | -·name:·Ensure·rsyslog·is·installed |
| 1544 | ··package: | 1548 | ··package: |
| Offset 1550, 44 lines modified | Offset 1555, 39 lines modified | ||
| 1550 | ··-·NIST-800-53-CM-6(a) | 1555 | ··-·NIST-800-53-CM-6(a) |
| 1551 | ··-·enable_strategy | 1556 | ··-·enable_strategy |
| 1552 | ··-·low_complexity | 1557 | ··-·low_complexity |
| 1553 | ··-·low_disruption | 1558 | ··-·low_disruption |
| 1554 | ··-·medium_severity | 1559 | ··-·medium_severity |
| 1555 | ··-·no_reboot_needed | 1560 | ··-·no_reboot_needed |
| 1556 | ··-·package_rsyslog_installed | 1561 | ··-·package_rsyslog_installed |
| 1557 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1558 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1559 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1560 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1561 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1562 | include·install_rsyslog | ||
| 1563 | class·install_rsyslog·{ | ||
| 1564 | ··package·{·'rsyslog': | ||
| 1565 | ····ensure·=>·'installed', | ||
| 1566 | ··} | ||
| 1567 | } | ||
| 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1569 | [[packages]] | ||
| 1570 | name·=·"rsyslog" | ||
| 1571 | version·=·"*" | ||
| 1572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1573 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1574 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1575 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1576 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1577 | #·Remediation·is·applicable·only·in·certain·platforms | 1567 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1578 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1568 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1579 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1569 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1580 | else | 1570 | else |
| 1581 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1571 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1582 | fi | 1572 | fi |
| 1573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1578 | include·install_rsyslog | ||
| 1579 | class·install_rsyslog·{ | ||
| 1580 | ··package·{·'rsyslog': | ||
| 1581 | ····ensure·=>·'installed', | ||
| 1582 | ··} | ||
| 1583 | } | ||
| 1583 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1584 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1584 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Debian·11.·The | 1585 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Debian·11.·The |
| 1585 | rsyslog·service·can·be·enabled·with·the·following·command: | 1586 | rsyslog·service·can·be·enabled·with·the·following·command: |
| 1586 | $·sudo·systemctl·enable·rsyslog.service | 1587 | $·sudo·systemctl·enable·rsyslog.service |
| 1587 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1588 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1588 | ············services,·which·are·essential·to·system·administration. | 1589 | ············services,·which·are·essential·to·system·administration. |
| 1589 | Severity: ··medium | 1590 | Severity: ··medium |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1649, 18 lines modified | Offset 1653, 14 lines modified | ||
| 1649 | class·enable_rsyslog·{ | 1653 | class·enable_rsyslog·{ |
| 1650 | ··service·{'rsyslog': | 1654 | ··service·{'rsyslog': |
| 1651 | ····enable·=>·true, | 1655 | ····enable·=>·true, |
| 1652 | ····ensure·=>·'running', | 1656 | ····ensure·=>·'running', |
| 1653 | ··} | 1657 | ··} |
| 1654 | } | 1658 | } |
| 1655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1656 | [customizations.services] | ||
| 1657 | enabled·=·["rsyslog"] | ||
| 1658 | Group ·File·Permissions·and·Masks· Group·contains·5·groups·and·17·rules | 1659 | Group ·File·Permissions·and·Masks· Group·contains·5·groups·and·17·rules |
| 1659 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Traditional·Unix·security·relies·heavily·on·file·and·directory | 1660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Traditional·Unix·security·relies·heavily·on·file·and·directory |
| 1660 | permissions·to·prevent·unauthorized·users·from·reading·or·modifying·files·to | 1661 | permissions·to·prevent·unauthorized·users·from·reading·or·modifying·files·to |
| 1661 | which·they·should·not·have·access. | 1662 | which·they·should·not·have·access. |
| Max diff block lines reached; 23602/29295 bytes (80.57%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037de0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037df0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e00:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e10:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e20:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e30:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e40:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e50:·3032·3 | 00037e50:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e60:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e70:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e80:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e90:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ea0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037eb0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ec0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15038, 167 lines modified | Offset 15038, 167 lines modified | ||
| 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003abd0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | 0003abe0:·646d·3236·3632·2220·7461·6269·6e64·6578··dm2662"·tabindex | ||
| 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003abf0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003ac00:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003ac10:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003ac20:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003ac30:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003ac40:·6d65·6469·6174·696f·6e20·4 | 0003ac40:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003ac50:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003ac60:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ac70:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ac80:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac90:·7365·2220·6964·3d22·6964·6d32·3636·3222··se"·id="idm2662" | |||
| 0003aca0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003acb0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003acc0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003acd0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ace0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003acf0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ad00:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ad10:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ad20:·7461·7267·6574·3d22·2369·646d·3236·3633··target="#idm2663 | |||
| 0003ad30:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ad40:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ad50:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ad60:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ad70:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ad80:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ad90:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ada0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003adb0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003adc0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003add0:·7365·2220·6964·3d22·6964·6d32·3636·3322··se"·id="idm2663" | |||
| 0003ade0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003adf0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ae00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ae10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ae20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ae30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ae40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ae50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003ae60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003ae70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003ae80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003ae90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003aea0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003aeb0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003aec0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003aed0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003aee0:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003aef0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003af00:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003af10:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003af20:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003af30:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003af40:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003af50:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003af60:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003af70:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003af80:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003af90:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003afa0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003afb0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003afc0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003afd0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003afe0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003aff0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b000:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b010:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b020:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b030:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b040:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b050:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b060:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b070:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b080:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b090:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b0a0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b0b0:·2223·6964·6d32·3636·3422·2074·6162·696e··"#idm2664"·tabin | |||
| 0003b0c0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b0d0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b0e0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b0f0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b100:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b110:·3e52·656d·6564·6961·7469·6f6e·2053·6865··>Remediation·She | |||
| 0003 | 0003b120:·6c6c·2073·6372·6970·7420·e287·b23c·2f61··ll·script·...</a | ||
| 0003 | 0003b130:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003 | 0003b140:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003 | 0003b150:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003 | 0003b160:·6d32·3636·3422·3e3c·7461·626c·6520·636c··m2664"><table·cl | ||
| 0003 | 0003b170:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003 | 0003b180:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003 | 0003b190:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003 | 0003b1a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003 | 0003b1b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003 | 0003b1c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003 | 0003b1d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003 | 0003b1e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 0003 | 0003b1f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003 | 0003b200:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003 | 0003b210:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | ||
| 0003 | 0003b220:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 0003 | 0003b230:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | ||
| 0003 | 0003b240:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0003 | 0003b250:·626c·653e·3c70·7265·3e3c·636f·6465·3e23··ble><pre><code># | ||
| 0003b260:·2052·656d·6564·6961·7469·6f6e·2069·7320···Remediation·is· | |||
| 0003b270:·6170·706c·6963·6162·6c65·206f·6e6c·7920··applicable·only· | |||
| 0003b280:·696e·2063·6572·7461·696e·2070·6c61·7466··in·certain·platf | |||
| 0003b290:·6f72·6d73·0a69·6620·5b20·2120·2d66·202f··orms.if·[·!·-f·/ | |||
| 0003b2a0:·2e64·6f63·6b65·7265·6e76·205d·2026·616d··.dockerenv·]·&am | |||
| 0003b2b0:·703b·2661·6d70·3b20·5b20·2120·2d66·202f··p;&·[·!·-f·/ | |||
| Max diff block lines reached; 435880/458704 bytes (95.02%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 134, 44 lines modified | Offset 139, 39 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 139 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 140 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 141 | ··-·low_complexity |
| 137 | ··-·low_disruption | 142 | ··-·low_disruption |
| 138 | ··-·medium_severity | 143 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 144 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 145 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 151 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 152 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 163 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 153 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 164 | else | 154 | else |
| 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 166 | fi | 156 | fi |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | include·install_aide | ||
| 163 | class·install_aide·{ | ||
| 164 | ··package·{·'aide': | ||
| 165 | ····ensure·=>·'installed', | ||
| 166 | ··} | ||
| 167 | } | ||
| 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 168 | Run·the·following·command·to·generate·a·new·database: | 169 | Run·the·following·command·to·generate·a·new·database: |
| 169 | $·sudo·aideinit | 170 | $·sudo·aideinit |
| 170 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 171 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 172 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 173 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 596, 14 lines modified | Offset 596, 19 lines modified | ||
| 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 596 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 597 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 598 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 599 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 600 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 601 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 602 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | [[packages]] | ||
| 605 | name·=·"sudo" | ||
| 606 | version·=·"*" | ||
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 607 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 608 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 609 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 610 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 611 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 608 | -·name:·Ensure·sudo·is·installed | 612 | -·name:·Ensure·sudo·is·installed |
| 609 | ··package: | 613 | ··package: |
| Offset 615, 44 lines modified | Offset 620, 39 lines modified | ||
| 615 | ··-·PCI-DSSv4-2.2.6 | 620 | ··-·PCI-DSSv4-2.2.6 |
| 616 | ··-·enable_strategy | 621 | ··-·enable_strategy |
| 617 | ··-·low_complexity | 622 | ··-·low_complexity |
| 618 | ··-·low_disruption | 623 | ··-·low_disruption |
| 619 | ··-·medium_severity | 624 | ··-·medium_severity |
| 620 | ··-·no_reboot_needed | 625 | ··-·no_reboot_needed |
| 621 | ··-·package_sudo_installed | 626 | ··-·package_sudo_installed |
| 622 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 623 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 624 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 625 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 626 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 627 | include·install_sudo | ||
| Max diff block lines reached; 60621/66297 bytes (91.44%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037dd0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037de0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037df0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e00:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e10:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e20:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e30:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e40:·3 | 00037e40:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e50:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e60:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e70:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037e80:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037e90:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ea0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037eb0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15043, 167 lines modified | Offset 15043, 167 lines modified | ||
| 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | 0003ac30:·6964·6d32·3636·3222·2074·6162·696e·6465··idm2662"·tabinde | ||
| 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003ac50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003ac60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003ac70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003ac80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ac90:·656d·6564·6961·7469·6f6e·204 | 0003ac90:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003aca0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003acb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003acc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003acd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ace0:·7073·6522·2069·643d·2269·646d·3236·3632··pse"·id="idm2662 | |||
| 0003acf0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad00:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad10:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad20:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ad50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003ad60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003ad70:·2d74·6172·6765·743d·2223·6964·6d32·3636··-target="#idm266 | |||
| 0003ad80:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003ad90:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003ada0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003adb0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003adc0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003add0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ade0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003adf0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae00:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae10:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae20:·7073·6522·2069·643d·2269·646d·3236·3633··pse"·id="idm2663 | |||
| 0003ae30:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae40:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae50:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae60:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae70:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae80:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae90:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aea0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003aeb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aec0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aed0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003aee0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003aef0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003af00:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003af10:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003af20:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af30:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af40:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003af50:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003af60:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003af70:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003af80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003af90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003afa0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003afb0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003afc0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003afd0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003afe0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003aff0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b000:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b010:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b020:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b030:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b040:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b050:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b060:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b070:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b080:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b090:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b0a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b0b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b0c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b0d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b0f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b100:·3d22·2369·646d·3236·3634·2220·7461·6269··="#idm2664"·tabi | |||
| 0003b110:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b120:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b130:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b140:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b150:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b160:·223e·5265·6d65·6469·6174·696f·6e20·5368··">Remediation·Sh | |||
| 0003 | 0003b170:·656c·6c20·7363·7269·7074·20e2·87b2·3c2f··ell·script·...</ | ||
| 0003 | 0003b180:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003b190:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003b1a0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003 | 0003b1b0:·646d·3236·3634·223e·3c74·6162·6c65·2063··dm2664"><table·c | ||
| 0003 | 0003b1c0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003 | 0003b1d0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003 | 0003b1e0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003 | 0003b1f0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003 | 0003b200:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003 | 0003b210:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003b220:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003 | 0003b230:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003 | 0003b240:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003 | 0003b250:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003 | 0003b260:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003 | 0003b270:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003b280:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003 | 0003b290:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003 | 0003b2a0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b2b0:·2320·5265·6d65·6469·6174·696f·6e20·6973··#·Remediation·is | |||
| 0003b2c0:·2061·7070·6c69·6361·626c·6520·6f6e·6c79···applicable·only | |||
| 0003b2d0:·2069·6e20·6365·7274·6169·6e20·706c·6174···in·certain·plat | |||
| 0003b2e0:·666f·726d·730a·6966·205b·2021·202d·6620··forms.if·[·!·-f· | |||
| 0003b2f0:·2f2e·646f·636b·6572·656e·7620·5d20·2661··/.dockerenv·]·&a | |||
| 0003b300:·6d70·3b26·616d·703b·205b·2021·202d·6620··mp;&·[·!·-f· | |||
| Max diff block lines reached; 478336/501160 bytes (95.45%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 135, 44 lines modified | Offset 140, 39 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 140 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 142 | ··-·low_complexity |
| 138 | ··-·low_disruption | 143 | ··-·low_disruption |
| 139 | ··-·medium_severity | 144 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 146 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 153 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 164 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 154 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 165 | else | 155 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 156 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 157 | fi |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 168 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 169 | Run·the·following·command·to·generate·a·new·database: | 170 | Run·the·following·command·to·generate·a·new·database: |
| 170 | $·sudo·aideinit | 171 | $·sudo·aideinit |
| 171 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 172 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 172 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 173 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 173 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 174 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 174 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 175 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1287, 14 lines modified | Offset 1287, 19 lines modified | ||
| 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 1287 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1288 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1289 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1290 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1291 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1292 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1293 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1295 | [[packages]] | ||
| 1296 | name·=·"sudo" | ||
| 1297 | version·=·"*" | ||
| 1294 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1295 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1296 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1297 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1298 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1299 | -·name:·Ensure·sudo·is·installed | 1303 | -·name:·Ensure·sudo·is·installed |
| 1300 | ··package: | 1304 | ··package: |
| Offset 1306, 44 lines modified | Offset 1311, 39 lines modified | ||
| 1306 | ··-·PCI-DSSv4-2.2.6 | 1311 | ··-·PCI-DSSv4-2.2.6 |
| 1307 | ··-·enable_strategy | 1312 | ··-·enable_strategy |
| 1308 | ··-·low_complexity | 1313 | ··-·low_complexity |
| 1309 | ··-·low_disruption | 1314 | ··-·low_disruption |
| 1310 | ··-·medium_severity | 1315 | ··-·medium_severity |
| 1311 | ··-·no_reboot_needed | 1316 | ··-·no_reboot_needed |
| 1312 | ··-·package_sudo_installed | 1317 | ··-·package_sudo_installed |
| 1313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1314 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1315 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1316 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1317 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1318 | include·install_sudo | ||
| Max diff block lines reached; 66876/72560 bytes (92.17%) of diff not shown. | |||
| Offset 14304, 15 lines modified | Offset 14304, 15 lines modified | ||
| 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037df0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037e00:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037e10:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037e20:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037e30:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037e40:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037e50:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037e60:·3 | 00037e60:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037e70:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037e80:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037e90:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037ea0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037eb0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037ec0:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037ed0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15029, 167 lines modified | Offset 15029, 167 lines modified | ||
| 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003ab40:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | 0003ab50:·6d32·3636·3222·2074·6162·696e·6465·783d··m2662"·tabindex= | ||
| 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003ab60:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003ab70:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003ab80:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003ab90:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003aba0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003abb0:·6564·6961·7469·6f6e·204 | 0003abb0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003abc0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003abd0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003abe0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003abf0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ac00:·6522·2069·643d·2269·646d·3236·3632·223e··e"·id="idm2662"> | |||
| 0003ac10:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ac20:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ac30:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003ac40:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003ac50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ac60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ac70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ac80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ac90:·6172·6765·743d·2223·6964·6d32·3636·3322··arget="#idm2663" | |||
| 0003aca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003acb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003acc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003acd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003ace0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003acf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003ad00:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ad10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad40:·6522·2069·643d·2269·646d·3236·3633·223e··e"·id="idm2663"> | |||
| 0003ad50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ad60:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ad70:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ad80:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ad90:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ada0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003adb0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003adc0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003add0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ade0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003adf0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae00:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003ae10:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003ae20:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003ae30:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae40:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ae50:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003ae60:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003ae70:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003ae80:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003ae90:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003aea0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003aeb0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003aec0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003aed0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003aee0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003aef0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003af00:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003af10:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003af20:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003af30:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003af40:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003af50:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003af60:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003af70:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003af80:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003af90:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003afa0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003afb0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003afc0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003afd0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003afe0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003aff0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b000:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b010:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b020:·2369·646d·3236·3634·2220·7461·6269·6e64··#idm2664"·tabind | |||
| 0003b030:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b040:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b050:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b060:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b070:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b080:·5265·6d65·6469·6174·696f·6e20·5368·656c··Remediation·Shel | |||
| 0003 | 0003b090:·6c20·7363·7269·7074·20e2·87b2·3c2f·613e··l·script·...</a> | ||
| 0003 | 0003b0a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0003 | 0003b0b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003 | 0003b0c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003 | 0003b0d0:·3236·3634·223e·3c74·6162·6c65·2063·6c61··2664"><table·cla | ||
| 0003 | 0003b0e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0003 | 0003b0f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0003 | 0003b100:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| 0003 | 0003b110:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | ||
| 0003 | 0003b120:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | ||
| 0003 | 0003b130:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003 | 0003b140:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003 | 0003b150:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003 | 0003b160:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003b170:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003 | 0003b180:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003 | 0003b190:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003 | 0003b1a0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | ||
| 0003 | 0003b1b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003 | 0003b1c0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2320··le><pre><code>#· | ||
| 0003b1d0:·5265·6d65·6469·6174·696f·6e20·6973·2061··Remediation·is·a | |||
| 0003b1e0:·7070·6c69·6361·626c·6520·6f6e·6c79·2069··pplicable·only·i | |||
| 0003b1f0:·6e20·6365·7274·6169·6e20·706c·6174·666f··n·certain·platfo | |||
| 0003b200:·726d·730a·6966·205b·2021·202d·6620·2f2e··rms.if·[·!·-f·/. | |||
| 0003b210:·646f·636b·6572·656e·7620·5d20·2661·6d70··dockerenv·]·& | |||
| 0003b220:·3b26·616d·703b·205b·2021·202d·6620·2f72··;&·[·!·-f·/r | |||
| Max diff block lines reached; 270744/293568 bytes (92.23%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 19 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 127 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 128 | ··package: |
| Offset 132, 44 lines modified | Offset 137, 39 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 137 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 138 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 139 | ··-·low_complexity |
| 135 | ··-·low_disruption | 140 | ··-·low_disruption |
| 136 | ··-·medium_severity | 141 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 142 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 143 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | include·install_aide | ||
| 145 | class·install_aide·{ | ||
| 146 | ··package·{·'aide': | ||
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 149 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 161 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" | 151 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"aide" |
| 162 | else | 152 | else |
| 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 164 | fi | 154 | fi |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | include·install_aide | ||
| 161 | class·install_aide·{ | ||
| 162 | ··package·{·'aide': | ||
| 163 | ····ensure·=>·'installed', | ||
| 164 | ··} | ||
| 165 | } | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 167 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·aideinit | 168 | $·sudo·aideinit |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 169 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 170 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 170 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 171 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 171 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 172 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 568, 14 lines modified | Offset 568, 19 lines modified | ||
| 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 568 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 569 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 570 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 571 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 573 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 574 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 576 | [[packages]] | ||
| 577 | name·=·"sudo" | ||
| 578 | version·=·"*" | ||
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 580 | -·name:·Ensure·sudo·is·installed | 584 | -·name:·Ensure·sudo·is·installed |
| 581 | ··package: | 585 | ··package: |
| Offset 587, 44 lines modified | Offset 592, 39 lines modified | ||
| 587 | ··-·PCI-DSSv4-2.2.6 | 592 | ··-·PCI-DSSv4-2.2.6 |
| 588 | ··-·enable_strategy | 593 | ··-·enable_strategy |
| 589 | ··-·low_complexity | 594 | ··-·low_complexity |
| 590 | ··-·low_disruption | 595 | ··-·low_disruption |
| 591 | ··-·medium_severity | 596 | ··-·medium_severity |
| 592 | ··-·no_reboot_needed | 597 | ··-·no_reboot_needed |
| 593 | ··-·package_sudo_installed | 598 | ··-·package_sudo_installed |
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 599 | include·install_sudo | ||
| Max diff block lines reached; 38769/44564 bytes (87.00%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037e50:·2d32·3 | 00037e50:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 27681, 181 lines modified | Offset 27681, 181 lines modified | ||
| 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0006c200:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | 0006c210:·2223·6964·6d34·3336·3722·2074·6162·696e··"#idm4367"·tabin | ||
| 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006c220:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006c230:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006c240:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006c250:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006c260:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006c270:·3e52·656d·6564·6961·7469·6f6e·204 | 0006c270:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0006c280:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0006c290:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0006c2a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0006c2b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0006c2c0:·6c61·7073·6522·2069·643d·2269·646d·3433··lapse"·id="idm43 | |||
| 0006c2d0:·3637·223e·3c70·7265·3e3c·636f·6465·3e0a··67"><pre><code>. | |||
| 0006c2e0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0006c280:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0006c290:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006c2a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006c2b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006c2c0:·2269·646d·3433·3637·223e·3c74·6162·6c65··"idm4367"><table | |||
| 0006c2d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006c2e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006c2f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006c300:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006c310:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006c320:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006c330:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006c340:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006c350:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006c360:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006c370:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006c380:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0006c390:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0006c3a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0006c3b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0006c3c0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0006c3d0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0006c3e0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0006c3f0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0006c400:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0006c410:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0006c420:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0006c430:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0006c440:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0006c450:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0006c460:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0006c470:·0a20·202d·2070·6163·6b61·6765·5f70·616d··.··-·package_pam | |||
| 0006c480:·5f70·7771·7561·6c69·7479·5f69·6e73·7461··_pwquality_insta | |||
| 0006c490:·6c6c·6564·0a0a·2d20·6e61·6d65·3a20·456e··lled..-·name:·En | |||
| 0006c | 0006c2f0:·6520·3d20·226c·6962·7061·6d2d·7077·7175··e·=·"libpam-pwqu | ||
| 0006c300:·616c·6974·7922·0a76·6572·7369·6f6e·203d··ality".version·= | |||
| 0006c310:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0006c4b0:·616c·6974·7920·6973·2069·6e73·7461·6c6c··ality·is·install | |||
| 0006c4c0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0006c4d0:·2020·6e61·6d65·3a20·6c69·6270·616d·2d70····name:·libpam-p | |||
| 0006c4e0:·7771·7561·6c69·7479·0a20·2020·2073·7461··wquality.····sta | |||
| 0006c4f0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0006c500:·656e·3a20·2722·6c69·6270·616d·2d72·756e··en:·'"libpam-run | |||
| 0006c510:·7469·6d65·2220·696e·2061·6e73·6962·6c65··time"·in·ansible | |||
| 0006c520:·5f66·6163·7473·2e70·6163·6b61·6765·7327··_facts.packages' | |||
| 0006c530:·0a20·2074·6167·733a·0a20·202d·2065·6e61··.··tags:.··-·ena | |||
| 0006c540:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0006c550:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0006c560:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0006c570:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0006c580:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0006c590:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0006c5a0:·7061·636b·6167·655f·7061·6d5f·7077·7175··package_pam_pwqu | |||
| 0006c5b0:·616c·6974·795f·696e·7374·616c·6c65·640a··ality_installed. | |||
| 0006c5c0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0006c5d0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0006c5e0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0006c5f0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0006c600:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0006c610:·3d22·2369·646d·3433·3638·2220·7461·6269··="#idm4368"·tabi | |||
| 0006c620:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0006c630:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0006c640:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0006c650:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0006c660:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0006c670:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0006c680:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0006c690:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006c6a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006c6b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006c6c0:·2269·646d·3433·3638·223e·3c74·6162·6c65··"idm4368"><table | |||
| 0006c6d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006c6e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006c6f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006c700:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006c710:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006c720:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006c730:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006c740:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006c750:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006c760:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006c770:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006c780:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0006c790:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0006c7a0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0006c7b0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0006c7c0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0006c7d0:·6c5f·6c69·6270·616d·2d70·7771·7561·6c69··l_libpam-pwquali | |||
| 0006c7e0:·7479·0a0a·636c·6173·7320·696e·7374·616c··ty..class·instal | |||
| 0006c7f0:·6c5f·6c69·6270·616d·2d70·7771·7561·6c69··l_libpam-pwquali | |||
| 0006c800:·7479·207b·0a20·2070·6163·6b61·6765·207b··ty·{.··package·{ | |||
| 0006c810:·2027·6c69·6270·616d·2d70·7771·7561·6c69···'libpam-pwquali | |||
| 0006c820:·7479·273a·0a20·2020·2065·6e73·7572·6520··ty':.····ensure· | |||
| 0006c830:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0006c840:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| Max diff block lines reached; 155040/179934 bytes (86.16%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:debian:debian_linux:12 | 47 | ····*·cpe:/o:debian:debian_linux:12 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 3895, 14 lines modified | Offset 3895, 19 lines modified | ||
| 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force | 3895 | Rationale:··effectiveness·of·a·password·in·resisting·attempts·at·guessing·and·brute-force |
| 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has | 3896 | ············attacks.·"pwquality"·enforces·complex·password·construction·configuration·and·has |
| 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. | 3897 | ············the·ability·to·limit·brute-force·attacks·on·the·system. |
| 3898 | Severity: ··medium | 3898 | Severity: ··medium |
| 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed | 3899 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_pam_pwquality_installed |
| 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 3900 | References:·_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 | 3901 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000480-GPOS-00225 |
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3903 | [[packages]] | ||
| 3904 | name·=·"libpam-pwquality" | ||
| 3905 | version·=·"*" | ||
| 3902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3907 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3908 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3909 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3910 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3907 | -·name:·Gather·the·package·facts | 3911 | -·name:·Gather·the·package·facts |
| 3908 | ··package_facts: | 3912 | ··package_facts: |
| Offset 3923, 45 lines modified | Offset 3928, 40 lines modified | ||
| 3923 | ··tags: | 3928 | ··tags: |
| 3924 | ··-·enable_strategy | 3929 | ··-·enable_strategy |
| 3925 | ··-·low_complexity | 3930 | ··-·low_complexity |
| 3926 | ··-·low_disruption | 3931 | ··-·low_disruption |
| 3927 | ··-·medium_severity | 3932 | ··-·medium_severity |
| 3928 | ··-·no_reboot_needed | 3933 | ··-·no_reboot_needed |
| 3929 | ··-·package_pam_pwquality_installed | 3934 | ··-·package_pam_pwquality_installed |
| 3930 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3931 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3932 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3933 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3934 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3935 | include·install_libpam-pwquality | ||
| 3936 | class·install_libpam-pwquality·{ | ||
| 3937 | ··package·{·'libpam-pwquality': | ||
| 3938 | ····ensure·=>·'installed', | ||
| 3939 | ··} | ||
| 3940 | } | ||
| 3941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3942 | [[packages]] | ||
| 3943 | name·=·"libpam-pwquality" | ||
| 3944 | version·=·"*" | ||
| 3945 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3935 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3946 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3936 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3947 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3937 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3948 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3938 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3949 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3939 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3950 | #·Remediation·is·applicable·only·in·certain·platforms | 3940 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3951 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep | 3941 | if·dpkg-query·--show·--showformat='${db:Status-Status}\n'·'libpam-runtime'·2>/dev/null·|·grep |
| 3952 | -q·installed;·then | 3942 | -q·installed;·then |
| 3953 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"libpam-pwquality" | 3943 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"libpam-pwquality" |
| 3954 | else | 3944 | else |
| 3955 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3945 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3956 | fi | 3946 | fi |
| 3947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3950 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3951 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3952 | include·install_libpam-pwquality | ||
| 3953 | class·install_libpam-pwquality·{ | ||
| 3954 | ··package·{·'libpam-pwquality': | ||
| 3955 | ····ensure·=>·'installed', | ||
| 3956 | ··} | ||
| 3957 | } | ||
| 3957 | Group ·Protect·Accounts·by·Restricting·Password-Based·Login· Group·contains·2·groups·and·2 | 3958 | Group ·Protect·Accounts·by·Restricting·Password-Based·Login· Group·contains·2·groups·and·2 |
| 3958 | rules | 3959 | rules |
| 3959 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Conventionally,·Unix·shell·accounts·are·accessed·by·providing·a·username·and·password | 3960 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Conventionally,·Unix·shell·accounts·are·accessed·by·providing·a·username·and·password |
| 3960 | to·a·login·program,·which·tests·these·values·for·correctness·using·the·/etc/passwd·and·/etc/ | 3961 | to·a·login·program,·which·tests·these·values·for·correctness·using·the·/etc/passwd·and·/etc/ |
| 3961 | shadow·files.·Password-based·login·is·vulnerable·to·guessing·of·weak·passwords,·and·to | 3962 | shadow·files.·Password-based·login·is·vulnerable·to·guessing·of·weak·passwords,·and·to |
| 3962 | sniffing·and·man-in-the-middle·attacks·against·passwords·entered·over·a·network·or·at·an | 3963 | sniffing·and·man-in-the-middle·attacks·against·passwords·entered·over·a·network·or·at·an |
| 3963 | insecure·console.·Therefore,·mechanisms·for·accessing·accounts·by·entering·usernames·and | 3964 | insecure·console.·Therefore,·mechanisms·for·accessing·accounts·by·entering·usernames·and |
| Offset 4555, 39 lines modified | Offset 4555, 39 lines modified | ||
| 4555 | ··-·PCI-DSSv4-2.2.4 | 4555 | ··-·PCI-DSSv4-2.2.4 |
| 4556 | ··-·disable_strategy | 4556 | ··-·disable_strategy |
| 4557 | ··-·low_complexity | 4557 | ··-·low_complexity |
| 4558 | ··-·low_disruption | 4558 | ··-·low_disruption |
| 4559 | ··-·medium_severity | 4559 | ··-·medium_severity |
| 4560 | ··-·no_reboot_needed | 4560 | ··-·no_reboot_needed |
| 4561 | ··-·package_dhcp_removed | 4561 | ··-·package_dhcp_removed |
| 4562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 4564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 4565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 4566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 4567 | include·remove_dhcp | ||
| 4568 | class·remove_dhcp·{ | ||
| 4569 | ··package·{·'dhcp': | ||
| 4570 | ····ensure·=>·'purged', | ||
| 4571 | ··} | ||
| 4572 | } | ||
| 4573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 4562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 4574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 4566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 4578 | #·CAUTION:·This·remediation·script·will·remove·dhcp | 4567 | #·CAUTION:·This·remediation·script·will·remove·dhcp |
| 4579 | #» ···from·the·system,·and·may·remove·any·packages | 4568 | #» ···from·the·system,·and·may·remove·any·packages |
| 4580 | #» ···that·depend·on·dhcp.·Execute·this | 4569 | #» ···that·depend·on·dhcp.·Execute·this |
| 4581 | #» ···remediation·AFTER·testing·on·a·non-production | 4570 | #» ···remediation·AFTER·testing·on·a·non-production |
| 4582 | #» ···system! | 4571 | #» ···system! |
| 4583 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"dhcp" | 4572 | DEBIAN_FRONTEND=noninteractive·apt-get·remove·-y·"dhcp" |
| 4573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| Max diff block lines reached; 23496/29102 bytes (80.74%) of diff not shown. | |||
| Offset 14284, 15 lines modified | Offset 14284, 15 lines modified | ||
| 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037cb0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037cc0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037cd0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037ce0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037cf0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037d00:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037d10:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037d20:·7320·6f66·2032·3032·3 | 00037d20:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037d40:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037d50:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037d60:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037d70:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037d80:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037d90:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 20541, 166 lines modified | Offset 20541, 166 lines modified | ||
| 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000503c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | 000503d0:·6d31·3037·3034·2220·7461·6269·6e64·6578··m10704"·tabindex | ||
| 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000503e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000503f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00050400:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00050410:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00050420:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00050430:·6d65·6469·6174·696f·6e20·4 | 00050430:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00050440:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00050440:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00050450:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00050460:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00050470:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00050480:·6d31·3037·3034·223e·3c74·6162·6c65·2063··m10704"><table·c | |||
| 00050490:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 000504a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 000504b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 000504c0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 000504d0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 000504e0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000504f0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00050500:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00050510:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00050520:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00050530:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00050540:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00050550:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00050560:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00050570:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00050580:·2d20·6e61·6d65·3a20·456e·7375·7265·2073··-·name:·Ensure·s | |||
| 00050590:·7973·6c6f·672d·6e67·2069·7320·696e·7374··yslog-ng·is·inst | |||
| 000505a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 000505b0:·0a20·2020·206e·616d·653a·2073·7973·6c6f··.····name:·syslo | |||
| 000505c0:·672d·6e67·0a20·2020·2073·7461·7465·3a20··g-ng.····state:· | |||
| 000505d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 000505e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000505f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00050600:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00050610:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00050620:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00050630:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00050640:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 00050650:·2d36·2861·290a·2020·2d20·656e·6162·6c65··-6(a).··-·enable | |||
| 00050660:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00050670:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00050680:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00050690:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 000506a0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 000506b0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 000506c0:·6b61·6765·5f73·7973·6c6f·676e·675f·696e··kage_syslogng_in | |||
| 000506d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 000506e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000506f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00050700:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00050710:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00050720:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | |||
| 00050730:·3730·3522·2074·6162·696e·6465·783d·2230··705"·tabindex="0 | |||
| 00050740:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00050750:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00050760:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00050770:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00050780:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00050790:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00050 | 00050450:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 00050 | 00050460:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 00050 | 00050470:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 00050 | 00050480:·7365·2220·6964·3d22·6964·6d31·3037·3034··se"·id="idm10704 | ||
| 00050490:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 000504a0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 000504b0:·3d20·2273·7973·6c6f·672d·6e67·220a·7665··=·"syslog-ng".ve | |||
| 000504c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 000507e0:·3035·223e·3c74·6162·6c65·2063·6c61·7373··05"><table·class | |||
| 000507f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00050800:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00050810:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00050820:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00050830:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00050840:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00050850:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00050860:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00050870:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00050880:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00050890:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000508a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000508b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 000508c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 000508d0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 000508e0:·7564·6520·696e·7374·616c·6c5f·7379·736c··ude·install_sysl | |||
| 000508f0:·6f67·2d6e·670a·0a63·6c61·7373·2069·6e73··og-ng..class·ins | |||
| 00050900:·7461·6c6c·5f73·7973·6c6f·672d·6e67·207b··tall_syslog-ng·{ | |||
| 00050910:·0a20·2070·6163·6b61·6765·207b·2027·7379··.··package·{·'sy | |||
| 00050920:·736c·6f67·2d6e·6727·3a0a·2020·2020·656e··slog-ng':.····en | |||
| 00050930:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 00050940:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 00050 | 000504d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 00050 | 000504e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 00050 | 000504f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 00050 | 00050500:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 00050 | 00050510:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00050 | 00050520:·646d·3130·3730·3522·2074·6162·696e·6465··dm10705"·tabinde | ||
| 00050 | 00050530:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00050 | 00050540:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00050 | 00050550:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00050 | 00050560:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00050 | 00050570:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00050 | 00050580:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | ||
| 00050a10:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00050 | 00050590:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 00050a30:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00050a40:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00050a50:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| Max diff block lines reached; 138518/161204 bytes (85.93%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Average·(Intermediate)·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_average |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1715, 14 lines modified | Offset 1715, 19 lines modified | ||
| 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1715 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1716 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1717 | References:················4.4.2.4 | 1717 | References:················4.4.2.4 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1719 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1720 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1721 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1723 | [[packages]] | ||
| 1724 | name·=·"syslog-ng" | ||
| 1725 | version·=·"*" | ||
| 1722 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1723 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1724 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1725 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1726 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1727 | -·name:·Ensure·syslog-ng·is·installed | 1731 | -·name:·Ensure·syslog-ng·is·installed |
| 1728 | ··package: | 1732 | ··package: |
| Offset 1734, 44 lines modified | Offset 1739, 39 lines modified | ||
| 1734 | ··-·NIST-800-53-CM-6(a) | 1739 | ··-·NIST-800-53-CM-6(a) |
| 1735 | ··-·enable_strategy | 1740 | ··-·enable_strategy |
| 1736 | ··-·low_complexity | 1741 | ··-·low_complexity |
| 1737 | ··-·low_disruption | 1742 | ··-·low_disruption |
| 1738 | ··-·medium_severity | 1743 | ··-·medium_severity |
| 1739 | ··-·no_reboot_needed | 1744 | ··-·no_reboot_needed |
| 1740 | ··-·package_syslogng_installed | 1745 | ··-·package_syslogng_installed |
| 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1742 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1743 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1744 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1745 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1746 | include·install_syslog-ng | ||
| 1747 | class·install_syslog-ng·{ | ||
| 1748 | ··package·{·'syslog-ng': | ||
| 1749 | ····ensure·=>·'installed', | ||
| 1750 | ··} | ||
| 1751 | } | ||
| 1752 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1753 | [[packages]] | ||
| 1754 | name·=·"syslog-ng" | ||
| 1755 | version·=·"*" | ||
| 1756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1746 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1747 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1748 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1749 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1750 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1761 | #·Remediation·is·applicable·only·in·certain·platforms | 1751 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1762 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1752 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1763 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1753 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1764 | else | 1754 | else |
| 1765 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1755 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1766 | fi | 1756 | fi |
| 1757 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1758 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1759 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1760 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1761 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1762 | include·install_syslog-ng | ||
| 1763 | class·install_syslog-ng·{ | ||
| 1764 | ··package·{·'syslog-ng': | ||
| 1765 | ····ensure·=>·'installed', | ||
| 1766 | ··} | ||
| 1767 | } | ||
| 1767 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1768 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1768 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1769 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1769 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1770 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1770 | command: | 1771 | command: |
| 1771 | $·sudo·systemctl·enable·syslog-ng.service | 1772 | $·sudo·systemctl·enable·syslog-ng.service |
| 1772 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1773 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1773 | ············services,·which·are·essential·to·system·administration. | 1774 | ············services,·which·are·essential·to·system·administration. |
| Offset 1787, 14 lines modified | Offset 1787, 18 lines modified | ||
| 1787 | ···························4.4.2.2,·4.4.2.4 | 1787 | ···························4.4.2.2,·4.4.2.4 |
| 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1788 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1789 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1790 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1791 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1792 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1793 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1795 | [customizations.services] | ||
| 1796 | enabled·=·["syslog-ng"] | ||
| 1794 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1795 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1796 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1797 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1798 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1799 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1802 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1800 | ··block: | 1803 | ··block: |
| Offset 1831, 18 lines modified | Offset 1835, 14 lines modified | ||
| 1831 | class·enable_syslog-ng·{ | 1835 | class·enable_syslog-ng·{ |
| 1832 | ··service·{'syslog-ng': | 1836 | ··service·{'syslog-ng': |
| 1833 | ····enable·=>·true, | 1837 | ····enable·=>·true, |
| 1834 | ····ensure·=>·'running', | 1838 | ····ensure·=>·'running', |
| 1835 | ··} | 1839 | ··} |
| 1836 | } | 1840 | } |
| 1837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1838 | [customizations.services] | ||
| 1839 | enabled·=·["syslog-ng"] | ||
| 1840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1841 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1841 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 1842 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 1842 | following·command: | 1843 | following·command: |
| 1843 | ·$·apt-get·install·rsyslog | 1844 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 17255/23106 bytes (74.68%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037cc0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cd0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ce0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037cf0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d00:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d10:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d30:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d30:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d40:·303 | 00037d40:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d50:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d60:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d70:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037d80:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037d90:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037da0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037db0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 21117, 166 lines modified | Offset 21117, 166 lines modified | ||
| 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | 000527c0:·6765·743d·2223·6964·6d31·3037·3034·2220··get="#idm10704"· | ||
| 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000527d0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000527e0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 000527f0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00052800:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00052810:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00052820:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00052830:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00052830:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00052840:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00052850:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00052860:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00052870:·2220·6964·3d22·6964·6d31·3037·3034·223e··"·id="idm10704"> | |||
| 00052880:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00052890:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000528a0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000528b0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000528c0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000528d0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000528e0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000528f0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00052900:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00052910:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00052920:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00052930:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00052940:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00052950:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00052960:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00052970:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 00052980:·456e·7375·7265·2073·7973·6c6f·672d·6e67··Ensure·syslog-ng | |||
| 00052990:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 000529a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 000529b0:·653a·2073·7973·6c6f·672d·6e67·0a20·2020··e:·syslog-ng.··· | |||
| 000529c0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 000529d0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 000529e0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 000529f0:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00052a00:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00052a10:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00052a20:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00052a30:·7461·6773·3a0a·2020·2d20·4e49·5354·2d38··tags:.··-·NIST-8 | |||
| 00052a40:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00052a50:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 00052a60:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 00052a70:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 00052a80:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 00052a90:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 00052aa0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 00052ab0:·0a20·202d·2070·6163·6b61·6765·5f73·7973··.··-·package_sys | |||
| 00052ac0:·6c6f·676e·675f·696e·7374·616c·6c65·640a··logng_installed. | |||
| 00052ad0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00052ae0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00052af0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00052b00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00052b10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00052b20:·3d22·2369·646d·3130·3730·3522·2074·6162··="#idm10705"·tab | |||
| 00052b30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00052b40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00052b50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00052b60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00052b70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00052b80:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00052 | 00052840:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 00052 | 00052850:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00052 | 00052860:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00052 | 00052870:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00052880:·6964·6d31·3037·3034·223e·3c70·7265·3e3c··idm10704"><pre>< | |||
| 00052890:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 000528a0:·5d5d·0a6e·616d·6520·3d20·2273·7973·6c6f··]].name·=·"syslo | |||
| 000528b0:·672d·6e67·220a·7665·7273·696f·6e20·3d20··g-ng".version·=· | |||
| 00052bd0:·3d22·6964·6d31·3037·3035·223e·3c74·6162··="idm10705"><tab | |||
| 00052be0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00052bf0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00052c00:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00052c10:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00052c20:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00052c30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00052c40:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00052c50:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00052c60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00052c70:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00052c80:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00052c90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00052ca0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00052cb0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00052cc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00052cd0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 00052ce0:·616c·6c5f·7379·736c·6f67·2d6e·670a·0a63··all_syslog-ng..c | |||
| 00052cf0:·6c61·7373·2069·6e73·7461·6c6c·5f73·7973··lass·install_sys | |||
| 00052d00:·6c6f·672d·6e67·207b·0a20·2070·6163·6b61··log-ng·{.··packa | |||
| 00052d10:·6765·207b·2027·7379·736c·6f67·2d6e·6727··ge·{·'syslog-ng' | |||
| 00052d20:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 00052d30:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 00052 | 000528c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 00052 | 000528d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 00052 | 000528e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 00052 | 000528f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 00052 | 00052900:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 00052 | 00052910:·7267·6574·3d22·2369·646d·3130·3730·3522··rget="#idm10705" | ||
| 00052 | 00052920:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00052 | 00052930:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00052 | 00052940:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00052 | 00052950:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00052 | 00052960:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 00052 | 00052970:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 00052980:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00052e00:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00052e10:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00052e20:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00052e30:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| Max diff block lines reached; 229434/252258 bytes (90.95%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·High·(Enforced)·Level |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_high |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1891, 14 lines modified | Offset 1891, 19 lines modified | ||
| 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1891 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1892 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1893 | References:················4.4.2.4 | 1893 | References:················4.4.2.4 |
| 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1894 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1895 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1896 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1897 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1899 | [[packages]] | ||
| 1900 | name·=·"syslog-ng" | ||
| 1901 | version·=·"*" | ||
| 1898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1902 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1903 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1904 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1905 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1906 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1903 | -·name:·Ensure·syslog-ng·is·installed | 1907 | -·name:·Ensure·syslog-ng·is·installed |
| 1904 | ··package: | 1908 | ··package: |
| Offset 1910, 44 lines modified | Offset 1915, 39 lines modified | ||
| 1910 | ··-·NIST-800-53-CM-6(a) | 1915 | ··-·NIST-800-53-CM-6(a) |
| 1911 | ··-·enable_strategy | 1916 | ··-·enable_strategy |
| 1912 | ··-·low_complexity | 1917 | ··-·low_complexity |
| 1913 | ··-·low_disruption | 1918 | ··-·low_disruption |
| 1914 | ··-·medium_severity | 1919 | ··-·medium_severity |
| 1915 | ··-·no_reboot_needed | 1920 | ··-·no_reboot_needed |
| 1916 | ··-·package_syslogng_installed | 1921 | ··-·package_syslogng_installed |
| 1917 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1918 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1919 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1920 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1921 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1922 | include·install_syslog-ng | ||
| 1923 | class·install_syslog-ng·{ | ||
| 1924 | ··package·{·'syslog-ng': | ||
| 1925 | ····ensure·=>·'installed', | ||
| 1926 | ··} | ||
| 1927 | } | ||
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1929 | [[packages]] | ||
| 1930 | name·=·"syslog-ng" | ||
| 1931 | version·=·"*" | ||
| 1932 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1933 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1934 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1935 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1936 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1937 | #·Remediation·is·applicable·only·in·certain·platforms | 1927 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1938 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1928 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1939 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1929 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1940 | else | 1930 | else |
| 1941 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1931 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1942 | fi | 1932 | fi |
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1934 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1935 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1936 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1937 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1938 | include·install_syslog-ng | ||
| 1939 | class·install_syslog-ng·{ | ||
| 1940 | ··package·{·'syslog-ng': | ||
| 1941 | ····ensure·=>·'installed', | ||
| 1942 | ··} | ||
| 1943 | } | ||
| 1943 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1944 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1944 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1945 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1945 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1946 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1946 | command: | 1947 | command: |
| 1947 | $·sudo·systemctl·enable·syslog-ng.service | 1948 | $·sudo·systemctl·enable·syslog-ng.service |
| 1948 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1949 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1949 | ············services,·which·are·essential·to·system·administration. | 1950 | ············services,·which·are·essential·to·system·administration. |
| Offset 1963, 14 lines modified | Offset 1963, 18 lines modified | ||
| 1963 | ···························4.4.2.2,·4.4.2.4 | 1963 | ···························4.4.2.2,·4.4.2.4 |
| 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1964 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1965 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1966 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1967 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1968 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1969 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1971 | [customizations.services] | ||
| 1972 | enabled·=·["syslog-ng"] | ||
| 1970 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1973 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1971 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1974 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1972 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1975 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1973 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1976 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1974 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1977 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1975 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1978 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1976 | ··block: | 1979 | ··block: |
| Offset 2007, 18 lines modified | Offset 2011, 14 lines modified | ||
| 2007 | class·enable_syslog-ng·{ | 2011 | class·enable_syslog-ng·{ |
| 2008 | ··service·{'syslog-ng': | 2012 | ··service·{'syslog-ng': |
| 2009 | ····enable·=>·true, | 2013 | ····enable·=>·true, |
| 2010 | ····ensure·=>·'running', | 2014 | ····ensure·=>·'running', |
| 2011 | ··} | 2015 | ··} |
| 2012 | } | 2016 | } |
| 2013 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2014 | [customizations.services] | ||
| 2015 | enabled·=·["syslog-ng"] | ||
| 2016 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 2017 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 2017 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 2018 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 2018 | following·command: | 2019 | following·command: |
| 2019 | ·$·apt-get·install·rsyslog | 2020 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 26510/32366 bytes (81.91%) of diff not shown. | |||
| Offset 14279, 15 lines modified | Offset 14279, 15 lines modified | ||
| 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037c60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037c70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037c80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037c90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ca0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037cc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037cd0:·3 | 00037cd0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037ce0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037cf0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d00:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d10:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d20:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d30:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d40:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15652, 165 lines modified | Offset 15652, 165 lines modified | ||
| 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | 0003d230:·6574·3d22·2369·646d·3130·3730·3422·2074··et="#idm10704"·t | ||
| 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003d240:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003d250:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003d260:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003d270:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003d280:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003d290:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003d2a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003d2a0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003d2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003d2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003d2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003d2e0:·2069·643d·2269·646d·3130·3730·3422·3e3c···id="idm10704">< | |||
| 0003d2f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003d300:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003d310:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003d320:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003d330:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003d340:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003d350:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003d360:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003d370:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003d380:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d390:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003d3a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003d3b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003d3c0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003d3d0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003d3e0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003d3f0:·6e73·7572·6520·7379·736c·6f67·2d6e·6720··nsure·syslog-ng· | |||
| 0003d400:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003d410:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003d420:·3a20·7379·736c·6f67·2d6e·670a·2020·2020··:·syslog-ng.···· | |||
| 0003d430:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003d440:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003d450:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003d460:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003d470:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003d480:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003d490:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003d4a0:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0003d4b0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003d4c0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003d4d0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003d4e0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003d4f0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003d500:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003d510:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003d520:·2020·2d20·7061·636b·6167·655f·7379·736c····-·package_sysl | |||
| 0003d530:·6f67·6e67·5f69·6e73·7461·6c6c·6564·0a3c··ogng_installed.< | |||
| 0003d540:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003d550:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003d560:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003d570:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003d580:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003d590:·2223·6964·6d31·3037·3035·2220·7461·6269··"#idm10705"·tabi | |||
| 0003d5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003d5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003d5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003d5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003d5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003d5f0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003d | 0003d2b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003d | 0003d2c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003d | 0003d2d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003d | 0003d2e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003d2f0:·646d·3130·3730·3422·3e3c·7072·653e·3c63··dm10704"><pre><c | |||
| 0003d300:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003d310:·5d0a·6e61·6d65·203d·2022·7379·736c·6f67··].name·=·"syslog | |||
| 0003d320:·2d6e·6722·0a76·6572·7369·6f6e·203d·2022··-ng".version·=·" | |||
| 0003d640:·2269·646d·3130·3730·3522·3e3c·7461·626c··"idm10705"><tabl | |||
| 0003d650:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003d660:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003d670:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003d680:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003d690:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003d6a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003d6b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003d6c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003d6d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003d6e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003d6f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003d700:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003d710:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003d720:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003d730:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003d740:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003d750:·6c6c·5f73·7973·6c6f·672d·6e67·0a0a·636c··ll_syslog-ng..cl | |||
| 0003d760:·6173·7320·696e·7374·616c·6c5f·7379·736c··ass·install_sysl | |||
| 0003d770:·6f67·2d6e·6720·7b0a·2020·7061·636b·6167··og-ng·{.··packag | |||
| 0003d780:·6520·7b20·2773·7973·6c6f·672d·6e67·273a··e·{·'syslog-ng': | |||
| 0003d790:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003d7a0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003d | 0003d330:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | ||
| 0003d | 0003d340:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | ||
| 0003d | 0003d350:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | ||
| 0003d | 0003d360:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | ||
| 0003d | 0003d370:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | ||
| 0003d | 0003d380:·6765·743d·2223·6964·6d31·3037·3035·2220··get="#idm10705"· | ||
| 0003d | 0003d390:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003d | 0003d3a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003d | 0003d3b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003d | 0003d3c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003d | 0003d3d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003d | 0003d3e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003d3f0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003d870:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003d880:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003d890:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003d8a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003d8b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| Max diff block lines reached; 105068/127616 bytes (82.33%) of diff not shown. | |||
| Offset 36, 15 lines modified | Offset 36, 15 lines modified | ||
| 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 36 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Minimal·Level |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_minimal |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:debian:debian_linux:12 | 40 | ····*·cpe:/o:debian:debian_linux:12 |
| 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 42 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 43 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 45 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 46 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 47 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 48 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 49 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 276, 14 lines modified | Offset 276, 19 lines modified | ||
| 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 276 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 277 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 278 | References:················4.4.2.4 | 278 | References:················4.4.2.4 |
| 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 279 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 280 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 281 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 282 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 284 | [[packages]] | ||
| 285 | name·=·"syslog-ng" | ||
| 286 | version·=·"*" | ||
| 283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 287 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 288 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 289 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 290 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 291 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 288 | -·name:·Ensure·syslog-ng·is·installed | 292 | -·name:·Ensure·syslog-ng·is·installed |
| 289 | ··package: | 293 | ··package: |
| Offset 295, 44 lines modified | Offset 300, 39 lines modified | ||
| 295 | ··-·NIST-800-53-CM-6(a) | 300 | ··-·NIST-800-53-CM-6(a) |
| 296 | ··-·enable_strategy | 301 | ··-·enable_strategy |
| 297 | ··-·low_complexity | 302 | ··-·low_complexity |
| 298 | ··-·low_disruption | 303 | ··-·low_disruption |
| 299 | ··-·medium_severity | 304 | ··-·medium_severity |
| 300 | ··-·no_reboot_needed | 305 | ··-·no_reboot_needed |
| 301 | ··-·package_syslogng_installed | 306 | ··-·package_syslogng_installed |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 307 | include·install_syslog-ng | ||
| 308 | class·install_syslog-ng·{ | ||
| 309 | ··package·{·'syslog-ng': | ||
| 310 | ····ensure·=>·'installed', | ||
| 311 | ··} | ||
| 312 | } | ||
| 313 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 314 | [[packages]] | ||
| 315 | name·=·"syslog-ng" | ||
| 316 | version·=·"*" | ||
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 318 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 319 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 320 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 321 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 322 | #·Remediation·is·applicable·only·in·certain·platforms | 312 | #·Remediation·is·applicable·only·in·certain·platforms |
| 323 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 313 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 324 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 314 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 325 | else | 315 | else |
| 326 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 316 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 327 | fi | 317 | fi |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 319 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 320 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 321 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 322 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 323 | include·install_syslog-ng | ||
| 324 | class·install_syslog-ng·{ | ||
| 325 | ··package·{·'syslog-ng': | ||
| 326 | ····ensure·=>·'installed', | ||
| 327 | ··} | ||
| 328 | } | ||
| 328 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 329 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 329 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 330 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 330 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 331 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 331 | command: | 332 | command: |
| 332 | $·sudo·systemctl·enable·syslog-ng.service | 333 | $·sudo·systemctl·enable·syslog-ng.service |
| 333 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 334 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 334 | ············services,·which·are·essential·to·system·administration. | 335 | ············services,·which·are·essential·to·system·administration. |
| Offset 348, 14 lines modified | Offset 348, 18 lines modified | ||
| 348 | ···························4.4.2.2,·4.4.2.4 | 348 | ···························4.4.2.2,·4.4.2.4 |
| 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 349 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 350 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 351 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 352 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 353 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 354 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 356 | [customizations.services] | ||
| 357 | enabled·=·["syslog-ng"] | ||
| 355 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 356 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 357 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 358 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 359 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 360 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 363 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 361 | ··block: | 364 | ··block: |
| Offset 392, 18 lines modified | Offset 396, 14 lines modified | ||
| 392 | class·enable_syslog-ng·{ | 396 | class·enable_syslog-ng·{ |
| 393 | ··service·{'syslog-ng': | 397 | ··service·{'syslog-ng': |
| 394 | ····enable·=>·true, | 398 | ····enable·=>·true, |
| 395 | ····ensure·=>·'running', | 399 | ····ensure·=>·'running', |
| 396 | ··} | 400 | ··} |
| 397 | } | 401 | } |
| 398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 399 | [customizations.services] | ||
| 400 | enabled·=·["syslog-ng"] | ||
| 401 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 402 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 402 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 403 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 403 | following·command: | 404 | following·command: |
| 404 | ·$·apt-get·install·rsyslog | 405 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 12271/18099 bytes (67.80%) of diff not shown. | |||
| Offset 14283, 15 lines modified | Offset 14283, 15 lines modified | ||
| 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00037ca0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00037cb0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00037cc0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00037cd0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00037ce0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00037cf0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00037d00:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00037d10:·3 | 00037d10:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00037d20:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00037d30:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00037d40:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00037d50:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00037d60:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00037d70:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00037d80:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 20552, 166 lines modified | Offset 20552, 166 lines modified | ||
| 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | 00050470:·2d74·6172·6765·743d·2223·6964·6d31·3037··-target="#idm107 | ||
| 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | 00050480:·3034·2220·7461·6269·6e64·6578·3d22·3022··04"·tabindex="0" | ||
| 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00050490:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 000504a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000504b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000504c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000504d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000504e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 000504f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 000504e0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000504f0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00050500:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00050510:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00050520:·6170·7365·2220·6964·3d22·6964·6d31·3037··apse"·id="idm107 | |||
| 00050530:·3034·223e·3c74·6162·6c65·2063·6c61·7373··04"><table·class | |||
| 00050540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00050550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00050560:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00050570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00050580:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00050590:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000505a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000505b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000505c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000505d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000505e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000505f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00050600:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00050610:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00050620:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00050630:·6d65·3a20·456e·7375·7265·2073·7973·6c6f··me:·Ensure·syslo | |||
| 00050640:·672d·6e67·2069·7320·696e·7374·616c·6c65··g-ng·is·installe | |||
| 00050650:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00050660:·206e·616d·653a·2073·7973·6c6f·672d·6e67···name:·syslog-ng | |||
| 00050670:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 00050680:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 00050690:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 000506a0:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 000506b0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 000506c0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 000506d0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 000506e0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4e49··].··tags:.··-·NI | |||
| 000506f0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 00050700:·290a·2020·2d20·656e·6162·6c65·5f73·7472··).··-·enable_str | |||
| 00050710:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00050720:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00050730:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00050740:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00050750:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00050760:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00050770:·5f73·7973·6c6f·676e·675f·696e·7374·616c··_syslogng_instal | |||
| 00050780:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00050790:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 000507a0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 000507b0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 000507c0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000507d0:·7267·6574·3d22·2369·646d·3130·3730·3522··rget="#idm10705" | |||
| 000507e0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000507f0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00050800:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00050810:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00050820:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00050830:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00050840:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 00050 | 00050500:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00050 | 00050510:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00050 | 00050520:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00050 | 00050530:·6964·3d22·6964·6d31·3037·3034·223e·3c70··id="idm10704"><p | ||
| 00050540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00050550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2273··ages]].name·=·"s | |||
| 00050560:·7973·6c6f·672d·6e67·220a·7665·7273·696f··yslog-ng".versio | |||
| 00050570:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00050890:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000508a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000508b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 000508c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000508d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000508e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000508f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00050900:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00050910:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00050920:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00050930:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00050940:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00050950:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00050960:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 00050970:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 00050980:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 00050990:·696e·7374·616c·6c5f·7379·736c·6f67·2d6e··install_syslog-n | |||
| 000509a0:·670a·0a63·6c61·7373·2069·6e73·7461·6c6c··g..class·install | |||
| 000509b0:·5f73·7973·6c6f·672d·6e67·207b·0a20·2070··_syslog-ng·{.··p | |||
| 000509c0:·6163·6b61·6765·207b·2027·7379·736c·6f67··ackage·{·'syslog | |||
| 000509d0:·2d6e·6727·3a0a·2020·2020·656e·7375·7265··-ng':.····ensure | |||
| 000509e0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 000509f0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 00050 | 00050580:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 00050 | 00050590:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 00050 | 000505a0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 00050 | 000505b0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 00050 | 000505c0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 00050 | 000505d0:·3730·3522·2074·6162·696e·6465·783d·2230··705"·tabindex="0 | ||
| 00050 | 000505e0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00050 | 000505f0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00050 | 00050600:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00050 | 00050610:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00050 | 00050620:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00050630:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00050ab0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 00050ac0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 00050ad0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00050ae0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| Max diff block lines reached; 229434/252120 bytes (91.00%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Profile·for·ANSSI·DAT-NT28·Restrictive·Level |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_np_nt28_restrictive |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:debian:debian_linux:12 | 41 | ····*·cpe:/o:debian:debian_linux:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 48 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 49 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 50 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········1.·_\x8A_\x8P_\x8T_\x8·_\x8s_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 1717, 14 lines modified | Offset 1717, 19 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 | 1717 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-001311,·CCI-001312 |
| 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, | 1718 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2, |
| 1719 | References:················4.4.2.4 | 1719 | References:················4.4.2.4 |
| 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1720 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1721 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1722 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1723 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [[packages]] | ||
| 1726 | name·=·"syslog-ng" | ||
| 1727 | version·=·"*" | ||
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1725 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1726 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1727 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1728 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1729 | -·name:·Ensure·syslog-ng·is·installed | 1733 | -·name:·Ensure·syslog-ng·is·installed |
| 1730 | ··package: | 1734 | ··package: |
| Offset 1736, 44 lines modified | Offset 1741, 39 lines modified | ||
| 1736 | ··-·NIST-800-53-CM-6(a) | 1741 | ··-·NIST-800-53-CM-6(a) |
| 1737 | ··-·enable_strategy | 1742 | ··-·enable_strategy |
| 1738 | ··-·low_complexity | 1743 | ··-·low_complexity |
| 1739 | ··-·low_disruption | 1744 | ··-·low_disruption |
| 1740 | ··-·medium_severity | 1745 | ··-·medium_severity |
| 1741 | ··-·no_reboot_needed | 1746 | ··-·no_reboot_needed |
| 1742 | ··-·package_syslogng_installed | 1747 | ··-·package_syslogng_installed |
| 1743 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1744 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1745 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1746 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1747 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1748 | include·install_syslog-ng | ||
| 1749 | class·install_syslog-ng·{ | ||
| 1750 | ··package·{·'syslog-ng': | ||
| 1751 | ····ensure·=>·'installed', | ||
| 1752 | ··} | ||
| 1753 | } | ||
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1755 | [[packages]] | ||
| 1756 | name·=·"syslog-ng" | ||
| 1757 | version·=·"*" | ||
| 1758 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1748 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1759 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1749 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1760 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1750 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1761 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1751 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1762 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1752 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1763 | #·Remediation·is·applicable·only·in·certain·platforms | 1753 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1764 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1754 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1765 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" | 1755 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"syslog-ng" |
| 1766 | else | 1756 | else |
| 1767 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1757 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1768 | fi | 1758 | fi |
| 1759 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1760 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1761 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1762 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1763 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1764 | include·install_syslog-ng | ||
| 1765 | class·install_syslog-ng·{ | ||
| 1766 | ··package·{·'syslog-ng': | ||
| 1767 | ····ensure·=>·'installed', | ||
| 1768 | ··} | ||
| 1769 | } | ||
| 1769 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1770 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·s\x8sy\x8ys\x8sl\x8lo\x8og\x8g-\x8-n\x8ng\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1770 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging | 1771 | The·syslog-ng·service·(in·replacement·of·rsyslog)·provides·syslog-style·logging |
| 1771 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following | 1772 | by·default·on·Debian.·The·syslog-ng·service·can·be·enabled·with·the·following |
| 1772 | command: | 1773 | command: |
| 1773 | $·sudo·systemctl·enable·syslog-ng.service | 1774 | $·sudo·systemctl·enable·syslog-ng.service |
| 1774 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging | 1775 | Rationale:··The·syslog-ng·service·must·be·running·in·order·to·provide·logging |
| 1775 | ············services,·which·are·essential·to·system·administration. | 1776 | ············services,·which·are·essential·to·system·administration. |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ···························4.4.2.2,·4.4.2.4 | 1789 | ···························4.4.2.2,·4.4.2.4 |
| 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1790 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1791 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1792 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1793 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1794 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1795 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations.services] | ||
| 1798 | enabled·=·["syslog-ng"] | ||
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1797 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1798 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1799 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1800 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1801 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng | 1804 | -·name:·Enable·syslog-ng·Service·-·Enable·service·syslog-ng |
| 1802 | ··block: | 1805 | ··block: |
| Offset 1833, 18 lines modified | Offset 1837, 14 lines modified | ||
| 1833 | class·enable_syslog-ng·{ | 1837 | class·enable_syslog-ng·{ |
| 1834 | ··service·{'syslog-ng': | 1838 | ··service·{'syslog-ng': |
| 1835 | ····enable·=>·true, | 1839 | ····enable·=>·true, |
| 1836 | ····ensure·=>·'running', | 1840 | ····ensure·=>·'running', |
| 1837 | ··} | 1841 | ··} |
| 1838 | } | 1842 | } |
| 1839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1840 | [customizations.services] | ||
| 1841 | enabled·=·["syslog-ng"] | ||
| 1842 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1843 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·i\x8is\x8s·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1843 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the | 1844 | Rsyslog·is·installed·by·default.·The·rsyslog·package·can·be·installed·with·the |
| 1844 | following·command: | 1845 | following·command: |
| 1845 | ·$·apt-get·install·rsyslog | 1846 | ·$·apt-get·install·rsyslog |
| Max diff block lines reached; 26510/32354 bytes (81.94%) of diff not shown. | |||
| Offset 14285, 15 lines modified | Offset 14285, 15 lines modified | ||
| 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037cc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037cd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ce0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cf0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037d10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037d20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037d30:·3230·323 | 00037d30:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037da0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 19682, 165 lines modified | Offset 19682, 165 lines modified | ||
| 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | 0004ce10:·7461·7267·6574·3d22·2369·646d·3130·3131··target="#idm1011 | ||
| 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0004ce20:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0004ce30:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0004ce40:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0004ce50:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0004ce60:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0004ce70:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0004ce80:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0004ce90:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0004cea0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0004ceb0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0004cec0:·7073·6522·2069·643d·2269·646d·3130·3131··pse"·id="idm1011 | |||
| 0004ced0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0004cee0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0004ce | 0004ce80:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0004ce90:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0004cea0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004ceb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004cec0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004ced0:·643d·2269·646d·3130·3131·3822·3e3c·7072··d="idm10118"><pr | |||
| 0004cee0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004cef0:·6765·735d·5d0a·6e61·6d65·203d·2022·7273··ges]].name·=·"rs | |||
| 0004cf00:·7973·6c6f·6722·0a76·6572·7369·6f6e·203d··yslog".version·= | |||
| 0004cf10:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0004cf20:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0004cf30:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0004cf40:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0004cf50:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0004cf60:·6172·6765·743d·2223·6964·6d31·3031·3139··arget="#idm10119 | |||
| 0004cf70:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0004cf80:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0004cf90:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0004cfa0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0004cfb0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0004cfc0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0004cfd0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0004cfe0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004cff0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004d000:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004d010:·7365·2220·6964·3d22·6964·6d31·3031·3139··se"·id="idm10119 | |||
| 0004d020:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0004d030:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0004 | 0004d040:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004d050:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0004d060:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0004d070:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0004d080:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004d090:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004d0a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004d0b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0004d0c0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0004cf10:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0004cf20:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0004cf30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004cf40:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0004cf50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004cf60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004cf70:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0004cf80:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0004cf90:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0004cfa0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0004cfb0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0004cfc0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0004cfd0:·653a·2045·6e73·7572·6520·7273·7973·6c6f··e:·Ensure·rsyslo | |||
| 0004cfe0:·6720·6973·2069·6e73·7461·6c6c·6564·0a20··g·is·installed.· | |||
| 0004cff0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0004d000:·6d65·3a20·7273·7973·6c6f·670a·2020·2020··me:·rsyslog.···· | |||
| 0004d010:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0004d020:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0004d030:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0004d040:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0004d050:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0004d060:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0004d070:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0004d080:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004d090:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0004d0a0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0004d0b0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0004d0c0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0004d0d0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0004d0e0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0004d0f0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0004d100:·2020·2d20·7061·636b·6167·655f·7273·7973····-·package_rsys | |||
| 0004d110:·6c6f·675f·696e·7374·616c·6c65·640a·3c2f··log_installed.</ | |||
| 0004d120:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0004d130:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0004d140:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0004d150:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0004d160:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0004d170:·2369·646d·3130·3131·3922·2074·6162·696e··#idm10119"·tabin | |||
| 0004d180:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0004d190:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0004d1a0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0004d1b0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0004d1c0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0004d1d0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0004d1e0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0004d1f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0004d200:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0004d210:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0004d220:·6964·6d31·3031·3139·223e·3c74·6162·6c65··idm10119"><table | |||
| 0004d230:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004d240:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004d250:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004d260:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004d270:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004d280:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004d290:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004d2a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004d2b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004d2c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| Max diff block lines reached; 207188/229736 bytes (90.19%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Debian·12 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:debian:debian_linux:12 | 42 | ····*·cpe:/o:debian:debian_linux:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 49 | ·········2.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 52 | ·········1.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 1531, 14 lines modified | Offset 1531, 19 lines modified | ||
| 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1531 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1532 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1533 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1534 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1535 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, | 1536 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024, |
| 1537 | ···························SRG-OS-000480-GPOS-00227 | 1537 | ···························SRG-OS-000480-GPOS-00227 |
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1539 | [[packages]] | ||
| 1540 | name·=·"rsyslog" | ||
| 1541 | version·=·"*" | ||
| 1538 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1542 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1539 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1543 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1540 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1544 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1541 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1545 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1542 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1546 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1543 | -·name:·Ensure·rsyslog·is·installed | 1547 | -·name:·Ensure·rsyslog·is·installed |
| 1544 | ··package: | 1548 | ··package: |
| Offset 1550, 44 lines modified | Offset 1555, 39 lines modified | ||
| 1550 | ··-·NIST-800-53-CM-6(a) | 1555 | ··-·NIST-800-53-CM-6(a) |
| 1551 | ··-·enable_strategy | 1556 | ··-·enable_strategy |
| 1552 | ··-·low_complexity | 1557 | ··-·low_complexity |
| 1553 | ··-·low_disruption | 1558 | ··-·low_disruption |
| 1554 | ··-·medium_severity | 1559 | ··-·medium_severity |
| 1555 | ··-·no_reboot_needed | 1560 | ··-·no_reboot_needed |
| 1556 | ··-·package_rsyslog_installed | 1561 | ··-·package_rsyslog_installed |
| 1557 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1558 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1559 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1560 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1561 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1562 | include·install_rsyslog | ||
| 1563 | class·install_rsyslog·{ | ||
| 1564 | ··package·{·'rsyslog': | ||
| 1565 | ····ensure·=>·'installed', | ||
| 1566 | ··} | ||
| 1567 | } | ||
| 1568 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1569 | [[packages]] | ||
| 1570 | name·=·"rsyslog" | ||
| 1571 | version·=·"*" | ||
| 1572 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1573 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1574 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1575 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1576 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1577 | #·Remediation·is·applicable·only·in·certain·platforms | 1567 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1578 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1568 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 1579 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" | 1569 | DEBIAN_FRONTEND=noninteractive·apt-get·install·-y·"rsyslog" |
| 1580 | else | 1570 | else |
| 1581 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1571 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1582 | fi | 1572 | fi |
| 1573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1578 | include·install_rsyslog | ||
| 1579 | class·install_rsyslog·{ | ||
| 1580 | ··package·{·'rsyslog': | ||
| 1581 | ····ensure·=>·'installed', | ||
| 1582 | ··} | ||
| 1583 | } | ||
| 1583 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1584 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1584 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Debian·12.·The | 1585 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Debian·12.·The |
| 1585 | rsyslog·service·can·be·enabled·with·the·following·command: | 1586 | rsyslog·service·can·be·enabled·with·the·following·command: |
| 1586 | $·sudo·systemctl·enable·rsyslog.service | 1587 | $·sudo·systemctl·enable·rsyslog.service |
| 1587 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging | 1588 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging |
| 1588 | ············services,·which·are·essential·to·system·administration. | 1589 | ············services,·which·are·essential·to·system·administration. |
| 1589 | Severity: ··medium | 1590 | Severity: ··medium |
| Offset 1605, 14 lines modified | Offset 1605, 18 lines modified | ||
| 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, | 1605 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1, |
| 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 | 1606 | ···························SR·6.2,·SR·7.1,·SR·7.2 |
| 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, | 1607 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4, |
| 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 | 1608 | ···························A.12.7.1,·A.14.2.7,·A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 1609 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 1610 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1611 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1613 | [customizations.services] | ||
| 1614 | enabled·=·["rsyslog"] | ||
| 1612 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1613 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1614 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1615 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1616 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1617 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 1620 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 1618 | ··block: | 1621 | ··block: |
| Offset 1649, 18 lines modified | Offset 1653, 14 lines modified | ||
| 1649 | class·enable_rsyslog·{ | 1653 | class·enable_rsyslog·{ |
| 1650 | ··service·{'rsyslog': | 1654 | ··service·{'rsyslog': |
| 1651 | ····enable·=>·true, | 1655 | ····enable·=>·true, |
| 1652 | ····ensure·=>·'running', | 1656 | ····ensure·=>·'running', |
| 1653 | ··} | 1657 | ··} |
| 1654 | } | 1658 | } |
| 1655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1656 | [customizations.services] | ||
| 1657 | enabled·=·["rsyslog"] | ||
| 1658 | Group ·File·Permissions·and·Masks· Group·contains·5·groups·and·17·rules | 1659 | Group ·File·Permissions·and·Masks· Group·contains·5·groups·and·17·rules |
| 1659 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Traditional·Unix·security·relies·heavily·on·file·and·directory | 1660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Traditional·Unix·security·relies·heavily·on·file·and·directory |
| 1660 | permissions·to·prevent·unauthorized·users·from·reading·or·modifying·files·to | 1661 | permissions·to·prevent·unauthorized·users·from·reading·or·modifying·files·to |
| 1661 | which·they·should·not·have·access. | 1662 | which·they·should·not·have·access. |
| Max diff block lines reached; 23602/29295 bytes (80.57%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-11"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·11</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·11.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 160 lines modified | Offset 72, 160 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="not_aa | 90 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 92 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 93 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 93 | ········</cpe-lang:logical-test> | 94 | ········</cpe-lang:logical-test> |
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | 97 | ········</cpe-lang:logical-test> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 97 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="grub2"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="package_iptables"> | 106 | ····<cpe-lang:platform·id="package_iptables"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 112 | ······</cpe-lang:logical-test> | ||
| 113 | ····</cpe-lang:platform> | ||
| 114 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="machine"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | ||
| 118 | ····</cpe-lang:platform> | ||
| 119 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | ||
| 124 | ····</cpe-lang:platform> | ||
| 125 | ····<cpe-lang:platform·id="grub2"> | ||
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_pam"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="package_ | 121 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 125 | ········</cpe-lang:logical-test> | ||
| 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 128 | ········</cpe-lang:logical-test> | ||
| 140 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id="package_logrotate"> | 131 | ····<cpe-lang:platform·id="package_logrotate"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="package_ | 136 | ····<cpe-lang:platform·id="package_ntp"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id="n | 141 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang: | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 155 | ········ | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 156 | ········</cpe-lang:logical-test> | ||
| 157 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 158 | ········ | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 159 | ········</cpe-lang:logical-test> | ||
| 160 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 148 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 152 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 153 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 154 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg- | 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 157 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 158 | ····</cpe-lang:platform> |
| 173 | ····<cpe-lang:platform·id="not_ | 159 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 175 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 161 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 176 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 162 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 177 | ········</cpe-lang:logical-test> | 163 | ········</cpe-lang:logical-test> |
| 178 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 179 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian11-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 180 | ········</cpe-lang:logical-test> | 166 | ········</cpe-lang:logical-test> |
| Max diff block lines reached; 85058/98988 bytes (85.93%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_DEBIAN-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Debian·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of | 7 | configuration·settings·for·Debian·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 258 lines modified | Offset 71, 258 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="selinux"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="package_nftables"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ········</cpe-lang:logical-test> | ||
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 94 | ········ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | ||
| 96 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="package_ | 94 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="package_libreswan"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_opt:def:1"/> | ||
| 113 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="package_iptables"> | 110 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 114 | ········</cpe-lang:logical-test> | ||
| 115 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 116 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 117 | ········</cpe-lang:logical-test> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="grub2"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="package_ | 132 | ····<cpe-lang:platform·id="package_iptables"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 133 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id="s | 137 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-s | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id="machine | 142 | ····<cpe-lang:platform·id="machine"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="g | 147 | ····<cpe-lang:platform·id="package_pam"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_bash"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 161 | ······</cpe-lang:logical-test> | 160 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 161 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id="non | 162 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 166 | ········</cpe-lang:logical-test> | ||
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg- | 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 169 | ········</cpe-lang:logical-test> | ||
| 166 | ······</cpe-lang:logical-test> | 170 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 171 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id="i | 172 | ····<cpe-lang:platform·id="machine_and_mount_srv"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-i | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-debian12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_srv:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | 176 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 144784/158863 bytes (91.14%) of diff not shown. | |||
| Offset 1, 3 lines modified | Offset 1, 3 lines modified | ||
| 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary | 1 | -rw-r--r--···0········0········0········4·2024-11-02·18:39:34.000000·debian-binary |
| 2 | -rw-r--r--···0········0········0····165 | 2 | -rw-r--r--···0········0········0····16532·2024-11-02·18:39:34.000000·control.tar.xz |
| 3 | -rw-r--r--···0········0········0·323 | 3 | -rw-r--r--···0········0········0·32362000·2024-11-02·18:39:34.000000·data.tar.xz |
| Offset 14295, 15 lines modified | Offset 14295, 15 lines modified | ||
| 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d60:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d70:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d80:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d90:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037da0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037db0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037dc0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037dd0:·2032·3032·3 | 00037dd0:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037de0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037df0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e00:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e10:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e20:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e30:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e40:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15105, 119 lines modified | Offset 15105, 119 lines modified | ||
| 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | 0003b010:·3133·3231·2220·7461·6269·6e64·6578·3d22··1321"·tabindex=" | ||
| 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b020:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b030:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b040:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b050:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b060:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b070:·6469·6174·696f·6e20·4 | 0003b070:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b080:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b090:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b0a0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0b0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0c0:·2220·6964·3d22·6964·6d31·3332·3122·3e3c··"·id="idm1321">< | |||
| 0003b0d0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b0e0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0f0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b100:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b080:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b090:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b0a0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0b0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003b0c0:·3332·3122·3e3c·7461·626c·6520·636c·6173··321"><table·clas | |||
| 0003b0d0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0e0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0f0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b100:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b110:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b120:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b130:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b140:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b160:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b170:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b180:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b190:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b1a0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1b0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1c0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1d0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1e0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1f0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b200:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b210:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b220:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b230:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b240:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b250:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b260:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b290:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b2a0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b2b0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b2c0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b2d0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b2e0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b2f0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b300:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b310:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b320:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b330:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b340:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b | 0003b110:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b360:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b370:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b380:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b390:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003b3a0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b3b0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3c0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3d0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3e0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3f0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b | 0003b120:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b130:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b140:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b150:·7267·6574·3d22·2369·646d·3133·3232·2220··rget="#idm1322"· | |||
| 0003b160:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b170:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b180:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b190:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b1a0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1b0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1c0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b | 0003b1d0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003b | 0003b1e0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003b | 0003b1f0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003b | 0003b200:·2220·6964·3d22·6964·6d31·3332·3222·3e3c··"·id="idm1322">< | ||
| 0003b | 0003b210:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003b | 0003b220:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b | 0003b230:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003b | 0003b240:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003b | 0003b250:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003b | 0003b260:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b270:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b280:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b | 0003b290:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b2a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b | 0003b2b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b | 0003b2c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b2d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003b | 0003b2e0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003b | 0003b2f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b540:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b550:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b560:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b570:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b580:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b590:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b5a0:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b5b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| Max diff block lines reached; 589376/605576 bytes (97.32%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·2·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············1.3.1 | 127 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 155, 19 lines modified | Offset 160, 14 lines modified | ||
| 155 | include·install_aide | 160 | include·install_aide |
| 156 | class·install_aide·{ | 161 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 162 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 159 | ··} | 164 | ··} |
| 160 | } | 165 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 167 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·/usr/sbin/aide·--init | 168 | $·sudo·/usr/sbin/aide·--init |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 169 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 170 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 170 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 171 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 171 | newly-generated·database·can·be·installed·as·follows: | 172 | newly-generated·database·can·be·installed·as·follows: |
| Offset 761, 14 lines modified | Offset 761, 19 lines modified | ||
| 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 761 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 762 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 763 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 764 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 765 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 766 | ············_\x8c_\x8i_\x8s·····4.3.1 | 766 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 767 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 769 | [[packages]] | ||
| 770 | name·=·"sudo" | ||
| 771 | version·=·"*" | ||
| 768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 772 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 769 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 773 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 770 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 774 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 771 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 775 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 772 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 776 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 773 | -·name:·Ensure·sudo·is·installed | 777 | -·name:·Ensure·sudo·is·installed |
| 774 | ··package: | 778 | ··package: |
| Offset 792, 19 lines modified | Offset 797, 14 lines modified | ||
| 792 | include·install_sudo | 797 | include·install_sudo |
| 793 | class·install_sudo·{ | 798 | class·install_sudo·{ |
| 794 | ··package·{·'sudo': | 799 | ··package·{·'sudo': |
| 795 | ····ensure·=>·'installed', | 800 | ····ensure·=>·'installed', |
| 796 | ··} | 801 | ··} |
| 797 | } | 802 | } |
| 798 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 799 | [[packages]] | ||
| 800 | name·=·"sudo" | ||
| 801 | version·=·"*" | ||
| 802 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 803 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 803 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a·real·tty. | 804 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a·real·tty. |
| 804 | This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers·configuration·file·or·any | 805 | This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers·configuration·file·or·any |
| 805 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 806 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 806 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from·retaining | 807 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from·retaining |
| 807 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 808 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 808 | Severity: ··medium | 809 | Severity: ··medium |
| Offset 9082, 14 lines modified | Offset 9082, 18 lines modified | ||
| 9082 | ············disruption·to·system·processes. | 9082 | ············disruption·to·system·processes. |
| 9083 | Severity: ··medium | 9083 | Severity: ··medium |
| 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 9084 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 9085 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 9086 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 9087 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 9088 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9090 | [customizations.services] | ||
| 9091 | enabled·=·["systemd-journald"] | ||
| 9089 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9092 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9090 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9093 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9091 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9094 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9092 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9095 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9093 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9096 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9094 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 9097 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 9095 | ··block: | 9098 | ··block: |
| Offset 9124, 18 lines modified | Offset 9128, 14 lines modified | ||
| 9124 | class·enable_systemd-journald·{ | 9128 | class·enable_systemd-journald·{ |
| 9125 | ··service·{'systemd-journald': | 9129 | ··service·{'systemd-journald': |
| 9126 | ····enable·=>·true, | 9130 | ····enable·=>·true, |
| 9127 | ····ensure·=>·'running', | 9131 | ····ensure·=>·'running', |
| 9128 | ··} | 9132 | ··} |
| 9129 | } | 9133 | } |
| 9130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9131 | [customizations.services] | ||
| 9132 | enabled·=·["systemd-journald"] | ||
| 9133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·j\x8jo\x8ou\x8ur\x8rn\x8na\x8al\x8ld\x8d·i\x8is\x8s·c\x8co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·t\x8to\x8o·c\x8co\x8om\x8mp\x8pr\x8re\x8es\x8ss\x8s·l\x8la\x8ar\x8rg\x8ge\x8e·l\x8lo\x8og\x8g·f\x8fi\x8il\x8le\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 9134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·j\x8jo\x8ou\x8ur\x8rn\x8na\x8al\x8ld\x8d·i\x8is\x8s·c\x8co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·t\x8to\x8o·c\x8co\x8om\x8mp\x8pr\x8re\x8es\x8ss\x8s·l\x8la\x8ar\x8rg\x8ge\x8e·l\x8lo\x8og\x8g·f\x8fi\x8il\x8le\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 67017/73250 bytes (91.49%) of diff not shown. | |||
| Offset 14295, 16 lines modified | Offset 14295, 16 lines modified | ||
| 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d60:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d70:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d80:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d90:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037da0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037db0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dc0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037dd0:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037de0:·303 | 00037de0:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037df0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e00:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e10:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e20:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037e30:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037e40:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037e50:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15078, 118 lines modified | Offset 15078, 118 lines modified | ||
| 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 0003ae50:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | 0003ae60:·3332·3122·2074·6162·696e·6465·783d·2230··321"·tabindex="0 | ||
| 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003ae70:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003ae80:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003ae90:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003aea0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003aeb0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003aec0:·6961·7469·6f6e·204 | 0003aec0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003aed0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003aee0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aef0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af10:·2069·643d·2269·646d·3133·3231·223e·3c70···id="idm1321"><p | |||
| 0003af20:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003af30:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003af40:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003af50:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003af60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003af70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003af80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003af90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003afa0:·6765·743d·2223·6964·6d31·3332·3222·2074··get="#idm1322"·t | |||
| 0003afb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003afc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003afd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003afe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aff0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b000:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b010:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003af00:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003af10:·3231·223e·3c74·6162·6c65·2063·6c61·7373··21"><table·class | |||
| 0003af20:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003af30:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003af40:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003af50:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003af60:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003af70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af80:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003af90:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003afa0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003afb0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003afc0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003afd0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003afe0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003aff0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b000:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b010:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b020:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b030:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b040:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b050:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b060:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b070:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b080:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b090:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b0a0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b0b0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b0c0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b0d0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b0e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b0f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b100:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b110:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b120:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b130:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b140:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b150:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b160:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b170:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b180:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b190:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b1a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b1b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b1c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b1d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b1e0:·6574·3d22·2369·646d·3133·3232·2220·7461··et="#idm1322"·ta | |||
| 0003b1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b250:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b2 | 0003b020:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b030:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b280:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b290:·643d·2269·646d·3133·3232·223e·3c74·6162··d="idm1322"><tab | |||
| 0003b2a0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b2b0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b2c0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b2d0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b2e0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b310:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b320:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b330:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b340:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b350:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b360:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b370:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b380:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b390:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b3a0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b3b0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b3c0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b3d0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| Max diff block lines reached; 446819/463019 bytes (96.50%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Amazon·Linux·2023·Benchmark·for·Level·1·-·Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:amazon:amazon_linux:2023 | 44 | ····*·cpe:/o:amazon:amazon_linux:2023 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············1.3.1 | 123 | ············_\x8c_\x8i_\x8s············1.3.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 151, 19 lines modified | Offset 156, 14 lines modified | ||
| 151 | include·install_aide | 156 | include·install_aide |
| 152 | class·install_aide·{ | 157 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 158 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 159 | ····ensure·=>·'installed', |
| 155 | ··} | 160 | ··} |
| 156 | } | 161 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | Run·the·following·command·to·generate·a·new·database: | 163 | Run·the·following·command·to·generate·a·new·database: |
| 163 | $·sudo·/usr/sbin/aide·--init | 164 | $·sudo·/usr/sbin/aide·--init |
| 164 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, | 165 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database, |
| 165 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a | 166 | the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a |
| 166 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The | 167 | secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The |
| 167 | newly-generated·database·can·be·installed·as·follows: | 168 | newly-generated·database·can·be·installed·as·follows: |
| Offset 661, 14 lines modified | Offset 661, 19 lines modified | ||
| 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 661 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 662 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 663 | ············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 664 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 665 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 666 | ············_\x8c_\x8i_\x8s·····4.3.1 | 666 | ············_\x8c_\x8i_\x8s·····4.3.1 |
| 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 667 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 669 | [[packages]] | ||
| 670 | name·=·"sudo" | ||
| 671 | version·=·"*" | ||
| 668 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 669 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 670 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 671 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 672 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 673 | -·name:·Ensure·sudo·is·installed | 677 | -·name:·Ensure·sudo·is·installed |
| 674 | ··package: | 678 | ··package: |
| Offset 692, 19 lines modified | Offset 697, 14 lines modified | ||
| 692 | include·install_sudo | 697 | include·install_sudo |
| 693 | class·install_sudo·{ | 698 | class·install_sudo·{ |
| 694 | ··package·{·'sudo': | 699 | ··package·{·'sudo': |
| 695 | ····ensure·=>·'installed', | 700 | ····ensure·=>·'installed', |
| 696 | ··} | 701 | ··} |
| 697 | } | 702 | } |
| 698 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 699 | [[packages]] | ||
| 700 | name·=·"sudo" | ||
| 701 | version·=·"*" | ||
| 702 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 703 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 703 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a·real·tty. | 704 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a·real·tty. |
| 704 | This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers·configuration·file·or·any | 705 | This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers·configuration·file·or·any |
| 705 | sudo·configuration·snippets·in·/etc/sudoers.d/. | 706 | sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 706 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from·retaining | 707 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from·retaining |
| 707 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 708 | ············access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 708 | Severity: ··medium | 709 | Severity: ··medium |
| Offset 8982, 14 lines modified | Offset 8982, 18 lines modified | ||
| 8982 | ············disruption·to·system·processes. | 8982 | ············disruption·to·system·processes. |
| 8983 | Severity: ··medium | 8983 | Severity: ··medium |
| 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled | 8984 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_systemd-journald_enabled |
| 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 | 8985 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001665 |
| 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 | 8986 | References:·_\x8n_\x8i_\x8s_\x8t···SC-24 |
| 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 | 8987 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000269-GPOS-00103 |
| 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 | 8988 | ············_\x8c_\x8i_\x8s····5.1.2.2 |
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8990 | [customizations.services] | ||
| 8991 | enabled·=·["systemd-journald"] | ||
| 8989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8992 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8990 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8993 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8991 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8994 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8992 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8995 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8993 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8996 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8994 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald | 8997 | -·name:·Enable·systemd-journald·Service·-·Enable·service·systemd-journald |
| 8995 | ··block: | 8998 | ··block: |
| Offset 9024, 18 lines modified | Offset 9028, 14 lines modified | ||
| 9024 | class·enable_systemd-journald·{ | 9028 | class·enable_systemd-journald·{ |
| 9025 | ··service·{'systemd-journald': | 9029 | ··service·{'systemd-journald': |
| 9026 | ····enable·=>·true, | 9030 | ····enable·=>·true, |
| 9027 | ····ensure·=>·'running', | 9031 | ····ensure·=>·'running', |
| 9028 | ··} | 9032 | ··} |
| 9029 | } | 9033 | } |
| 9030 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9031 | [customizations.services] | ||
| 9032 | enabled·=·["systemd-journald"] | ||
| 9033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·j\x8jo\x8ou\x8ur\x8rn\x8na\x8al\x8ld\x8d·i\x8is\x8s·c\x8co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·t\x8to\x8o·c\x8co\x8om\x8mp\x8pr\x8re\x8es\x8ss\x8s·l\x8la\x8ar\x8rg\x8ge\x8e·l\x8lo\x8og\x8g·f\x8fi\x8il\x8le\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 9034 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·j\x8jo\x8ou\x8ur\x8rn\x8na\x8al\x8ld\x8d·i\x8is\x8s·c\x8co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·t\x8to\x8o·c\x8co\x8om\x8mp\x8pr\x8re\x8es\x8ss\x8s·l\x8la\x8ar\x8rg\x8ge\x8e·l\x8lo\x8og\x8g·f\x8fi\x8il\x8le\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 53748/59991 bytes (89.59%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15468, 118 lines modified | Offset 15468, 118 lines modified | ||
| 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | 0003c6b0:·7267·6574·3d22·2369·646d·3131·3836·2220··rget="#idm1186"· | ||
| 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003c6c0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003c6d0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003c6e0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003c6f0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003c700:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003c710:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003c720:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003c720:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003c730:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c740:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c750:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c760:·2220·6964·3d22·6964·6d31·3138·3622·3e3c··"·id="idm1186">< | |||
| 0003c770:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c780:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c790:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c7a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c7b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c7c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c7d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c7e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c800:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c810:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c820:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c830:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c840:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c850:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c860:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c870:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c880:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c890:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c8a0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c8b0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c8c0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c8d0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c8e0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c8f0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c900:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c910:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c920:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c930:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003c940:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003c950:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003c960:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003c970:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003c980:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003c990:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003c9a0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003c9b0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003c9c0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003c9d0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003c9e0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003c9f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ca00:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ca10:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ca20:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ca30:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ca40:·6964·6d31·3138·3722·2074·6162·696e·6465··idm1187"·tabinde | |||
| 0003ca50:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003ca60:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003ca70:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003ca80:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003ca90:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003caa0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003c | 0003c730:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 0003c | 0003c740:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003c | 0003c750:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003c760:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c770:·6964·6d31·3138·3622·3e3c·7072·653e·3c63··idm1186"><pre><c | |||
| 0003c780:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003c790:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003c7a0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003c7b0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003c7c0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003c7d0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003c7e0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003c7f0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003c800:·2369·646d·3131·3837·2220·7461·6269·6e64··#idm1187"·tabind | |||
| 0003c810:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003c820:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003c830:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003c840:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003c850:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003c860:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003c870:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003c880:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c890:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c | 0003c8a0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003c | 0003c8b0:·6964·6d31·3138·3722·3e3c·7461·626c·6520··idm1187"><table· | ||
| 0003c | 0003c8c0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0003c | 0003c8d0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0003c | 0003c8e0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0003c | 0003c8f0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0003c | 0003c900:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0003c | 0003c910:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003c | 0003c920:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c | 0003c930:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003c | 0003c940:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003c | 0003c950:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003c | 0003c960:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c | 0003c970:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 0003c | 0003c980:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003c | 0003c990:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003c | 0003c9a0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 0003cbf0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003cc00:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003cc10:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003cc20:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003cc30:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003cc40:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| Max diff block lines reached; 323828/339890 bytes (95.27%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 160, 14 lines modified | Offset 160, 19 lines modified | ||
| 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 160 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 161 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 162 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 163 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 164 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 165 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 166 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | -·name:·Ensure·aide·is·installed | 176 | -·name:·Ensure·aide·is·installed |
| 173 | ··package: | 177 | ··package: |
| Offset 193, 19 lines modified | Offset 198, 14 lines modified | ||
| 193 | include·install_aide | 198 | include·install_aide |
| 194 | class·install_aide·{ | 199 | class·install_aide·{ |
| 195 | ··package·{·'aide': | 200 | ··package·{·'aide': |
| 196 | ····ensure·=>·'installed', | 201 | ····ensure·=>·'installed', |
| 197 | ··} | 202 | ··} |
| 198 | } | 203 | } |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 200 | [[packages]] | ||
| 201 | name·=·"aide" | ||
| 202 | version·=·"*" | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 207 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 208 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 208 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 209 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 209 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 210 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 4635, 14 lines modified | Offset 4635, 19 lines modified | ||
| 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4635 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4636 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4637 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4638 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4639 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4640 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4641 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4643 | [[packages]] | ||
| 4644 | name·=·"logrotate" | ||
| 4645 | version·=·"*" | ||
| 4642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4647 | -·name:·Ensure·logrotate·is·installed | 4651 | -·name:·Ensure·logrotate·is·installed |
| 4648 | ··package: | 4652 | ··package: |
| Offset 4667, 19 lines modified | Offset 4672, 14 lines modified | ||
| 4667 | include·install_logrotate | 4672 | include·install_logrotate |
| 4668 | class·install_logrotate·{ | 4673 | class·install_logrotate·{ |
| 4669 | ··package·{·'logrotate': | 4674 | ··package·{·'logrotate': |
| 4670 | ····ensure·=>·'installed', | 4675 | ····ensure·=>·'installed', |
| 4671 | ··} | 4676 | ··} |
| 4672 | } | 4677 | } |
| 4673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4674 | [[packages]] | ||
| 4675 | name·=·"logrotate" | ||
| 4676 | version·=·"*" | ||
| 4677 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·17·rules | 4678 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·17·rules |
| 4678 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the | 4679 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the |
| 4679 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about | 4680 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about |
| 4680 | networking·which·must·be·made·when·configuring·a·system. | 4681 | networking·which·must·be·made·when·configuring·a·system. |
| 4681 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security | 4682 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security |
| 4682 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to | 4683 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to |
| Offset 4782, 14 lines modified | Offset 4782, 19 lines modified | ||
| 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4782 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4783 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4784 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4785 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4786 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4787 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4788 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4790 | [[packages]] | ||
| 4791 | name·=·"firewalld" | ||
| 4792 | version·=·"*" | ||
| 4789 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4790 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4791 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4792 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4793 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4794 | -·name:·Ensure·firewalld·is·installed | 4798 | -·name:·Ensure·firewalld·is·installed |
| 4795 | ··package: | 4799 | ··package: |
| Offset 4813, 19 lines modified | Offset 4818, 14 lines modified | ||
| 4813 | include·install_firewalld | 4818 | include·install_firewalld |
| 4814 | class·install_firewalld·{ | 4819 | class·install_firewalld·{ |
| 4815 | ··package·{·'firewalld': | 4820 | ··package·{·'firewalld': |
| 4816 | ····ensure·=>·'installed', | 4821 | ····ensure·=>·'installed', |
| 4817 | ··} | 4822 | ··} |
| 4818 | } | 4823 | } |
| 4819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4820 | [[packages]] | ||
| 4821 | name·=·"firewalld" | ||
| Max diff block lines reached; 29734/35893 bytes (82.84%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19675, 174 lines modified | Offset 19675, 174 lines modified | ||
| 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004cda0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | 0004cdb0:·646d·3638·3333·2220·7461·6269·6e64·6578··dm6833"·tabindex | ||
| 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004cdc0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004cdd0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004cde0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004cdf0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004ce00:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004ce10:·6d65·6469·6174·696f·6e20·4 | 0004ce10:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0004ce20:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0004ce30:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004ce40:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004ce50:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004ce60:·6d36·3833·3322·3e3c·7461·626c·6520·636c··m6833"><table·cl | |||
| 0004ce70:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0004ce80:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0004ce90:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0004cea0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0004ceb0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0004cec0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004ced0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004cee0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0004cef0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004cf00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0004cf10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0004cf20:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0004c | 0004ce20:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0004ce30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0004ce40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0004ce50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0004ce60:·7365·2220·6964·3d22·6964·6d36·3833·3322··se"·id="idm6833" | |||
| 0004ce70:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0004ce80:·7374·6f6d·697a·6174·696f·6e73·2e73·6572··stomizations.ser | |||
| 0004ce90:·7669·6365·735d·0a65·6e61·626c·6564·203d··vices].enabled·= | |||
| 0004cea0:·205b·2266·6972·6577·616c·6c64·225d·0a3c···["firewalld"].< | |||
| 0004ceb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0004cec0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0004ced0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0004cee0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0004cef0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0004cf00:·2223·6964·6d36·3833·3422·2074·6162·696e··"#idm6834"·tabin | |||
| 0004cf10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0004cf20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0004cf30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0004cf40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0004cf50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0004cf60:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0004cf70:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004cf80:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004cf90:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004cfa0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004cfb0:·2269·646d·3638·3334·223e·3c74·6162·6c65··"idm6834"><table | |||
| 0004cfc0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0004cfd0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0004cfe0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0004cff0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0004d000:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0004d010:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004d020:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004d030:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004 | 0004d040:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0004d050:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004d060:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0004d070:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0004d080:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0004d090:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0004d0a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0004d0b0:·653e·2d20·6e61·6d65·3a20·4761·7468·6572··e>-·name:·Gather | |||
| 0004d0c0:·2074·6865·2070·6163·6b61·6765·2066·6163···the·package·fac | |||
| 0004d0d0:·7473·0a20·2070·6163·6b61·6765·5f66·6163··ts.··package_fac | |||
| 0004d0e0:·7473·3a0a·2020·2020·6d61·6e61·6765·723a··ts:.····manager: | |||
| 0004d0f0:·2061·7574·6f0a·2020·7461·6773·3a0a·2020···auto.··tags:.·· | |||
| 0004cf50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0004cf60:·206e·616d·653a·2047·6174·6865·7220·7468···name:·Gather·th | |||
| 0004cf70:·6520·7061·636b·6167·6520·6661·6374·730a··e·package·facts. | |||
| 0004cf80:·2020·7061·636b·6167·655f·6661·6374·733a····package_facts: | |||
| 0004cf90:·0a20·2020·206d·616e·6167·6572·3a20·6175··.····manager:·au | |||
| 0004cfa0:·746f·0a20·2074·6167·733a·0a20·202d·204e··to.··tags:.··-·N | |||
| 0004cfb0:·4953·542d·3830·302d·3137·312d·332e·312e··IST-800-171-3.1. | |||
| 0004cfc0:·330a·2020·2d20·4e49·5354·2d38·3030·2d31··3.··-·NIST-800-1 | |||
| 0004cfd0:·3731·2d33·2e34·2e37·0a20·202d·204e·4953··71-3.4.7.··-·NIS | |||
| 0004cfe0:·542d·3830·302d·3533·2d41·432d·340a·2020··T-800-53-AC-4.·· | |||
| 0004cff0:·2d20·4e49·5354·2d38·3030·2d35·332d·4341··-·NIST-800-53-CA | |||
| 0004d000:·2d33·2835·290a·2020·2d20·4e49·5354·2d38··-3(5).··-·NIST-8 | |||
| 0004d010:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0004d | 0004d100:·2d20·4e49·5354·2d38·3030·2d31·3731·2d33··-·NIST-800-171-3 | ||
| 0004d030:·2d37·2862·290a·2020·2d20·4e49·5354·2d38··-7(b).··-·NIST-8 | |||
| 0004d040:·3030·2d35·332d·5343·2d37·2832·3129·0a20··00-53-SC-7(21).· | |||
| 0004d050:·202d·2050·4349·2d44·5353·7634·2d31·2e32···-·PCI-DSSv4-1.2 | |||
| 0004d060:·2e31·0a20·202d·2065·6e61·626c·655f·7374··.1.··-·enable_st | |||
| 0004d070:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0004d080:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0004d090:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0004d0a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0004d0b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0004d0c0:·6565·6465·640a·2020·2d20·7365·7276·6963··eeded.··-·servic | |||
| 0004d0d0:·655f·6669·7265·7761·6c6c·645f·656e·6162··e_firewalld_enab | |||
| 0004d0e0:·6c65·640a·0a2d·206e·616d·653a·2056·6572··led..-·name:·Ver | |||
| 0004d0f0:·6966·7920·6669·7265·7761·6c6c·6420·456e··ify·firewalld·En | |||
| 0004d1 | 0004d110:·2e31·2e33·0a20·202d·204e·4953·542d·3830··.1.3.··-·NIST-80 | ||
| 0004d120:·302d·3137·312d·332e·342e·370a·2020·2d20··0-171-3.4.7.··-· | |||
| 0004d130:·4e49·5354·2d38·3030·2d35·332d·4143·2d34··NIST-800-53-AC-4 | |||
| 0004d140:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d150:·2d43·412d·3328·3529·0a20·202d·204e·4953··-CA-3(5).··-·NIS | |||
| 0004d160:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0004d170:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004d180:·2d43·4d2d·3728·6229·0a20·202d·204e·4953··-CM-7(b).··-·NIS | |||
| 0004d190:·542d·3830·302d·3533·2d53·432d·3728·3231··T-800-53-SC-7(21 | |||
| 0004d1a0:·290a·2020·2d20·5043·492d·4453·5376·342d··).··-·PCI-DSSv4- | |||
| 0004d1b0:·312e·322e·310a·2020·2d20·656e·6162·6c65··1.2.1.··-·enable | |||
| 0004d1c0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0004d1d0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 240066/263856 bytes (90.98%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·2 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:2 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 50 | ·········2.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1016, 14 lines modified | Offset 1016, 18 lines modified | ||
| 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 1016 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 1017 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 1018 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- | 1019 | ···························SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS- |
| 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- | 1020 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········000480-GPOS-00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480- |
| 1021 | ···························GPOS-00232 | 1021 | ···························GPOS-00232 |
| 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 1022 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1024 | [customizations.services] | ||
| 1025 | enabled·=·["firewalld"] | ||
| 1023 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1024 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1025 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1026 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1027 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1028 | -·name:·Gather·the·package·facts | 1031 | -·name:·Gather·the·package·facts |
| 1029 | ··package_facts: | 1032 | ··package_facts: |
| Offset 1087, 18 lines modified | Offset 1091, 14 lines modified | ||
| 1087 | class·enable_firewalld·{ | 1091 | class·enable_firewalld·{ |
| 1088 | ··service·{'firewalld': | 1092 | ··service·{'firewalld': |
| 1089 | ····enable·=>·true, | 1093 | ····enable·=>·true, |
| 1090 | ····ensure·=>·'running', | 1094 | ····ensure·=>·'running', |
| 1091 | ··} | 1095 | ··} |
| 1092 | } | 1096 | } |
| 1093 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1094 | [customizations.services] | ||
| 1095 | enabled·=·["firewalld"] | ||
| 1096 | Group ·Strengthen·the·Default·Ruleset· Group·contains·1·rule | 1097 | Group ·Strengthen·the·Default·Ruleset· Group·contains·1·rule |
| 1097 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·default·rules·can·be·strengthened.·The·system·scripts·that·activate·the | 1098 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·default·rules·can·be·strengthened.·The·system·scripts·that·activate·the |
| 1098 | firewall·rules·expect·them·to·be·defined·in·configuration·files·under·the·/etc/ | 1099 | firewall·rules·expect·them·to·be·defined·in·configuration·files·under·the·/etc/ |
| 1099 | firewalld/services·and·/etc/firewalld/zones·directories. | 1100 | firewalld/services·and·/etc/firewalld/zones·directories. |
| 1100 | The·following·recommendations·describe·how·to·strengthen·the·default·ruleset | 1101 | The·following·recommendations·describe·how·to·strengthen·the·default·ruleset |
| 1101 | configuration·file.·An·alternative·to·editing·this·configuration·file·is·to·create·a | 1102 | configuration·file.·An·alternative·to·editing·this·configuration·file·is·to·create·a |
| Offset 1206, 14 lines modified | Offset 1206, 18 lines modified | ||
| 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 1206 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 1207 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 1208 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1209 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 1210 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 1211 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 1212 | ···························000480-GPOS-00227 | 1212 | ···························000480-GPOS-00227 |
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1214 | [customizations.services] | ||
| 1215 | masked·=·["autofs"] | ||
| 1213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1216 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1217 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1218 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1219 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1220 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1218 | -·name:·Gather·the·package·facts | 1221 | -·name:·Gather·the·package·facts |
| 1219 | ··package_facts: | 1222 | ··package_facts: |
| Offset 1329, 18 lines modified | Offset 1333, 14 lines modified | ||
| 1329 | class·disable_autofs·{ | 1333 | class·disable_autofs·{ |
| 1330 | ··service·{'autofs': | 1334 | ··service·{'autofs': |
| 1331 | ····enable·=>·false, | 1335 | ····enable·=>·false, |
| 1332 | ····ensure·=>·'stopped', | 1336 | ····ensure·=>·'stopped', |
| 1333 | ··} | 1337 | ··} |
| 1334 | } | 1338 | } |
| 1335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1336 | [customizations.services] | ||
| 1337 | masked·=·["autofs"] | ||
| 1338 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·K\x8Ke\x8er\x8rn\x8ne\x8el\x8l·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·f\x8fo\x8or\x8r·U\x8US\x8SB\x8B·v\x8vi\x8ia\x8a·B\x8Bo\x8oo\x8ot\x8tl\x8lo\x8oa\x8ad\x8de\x8er\x8r·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1339 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·K\x8Ke\x8er\x8rn\x8ne\x8el\x8l·S\x8Su\x8up\x8pp\x8po\x8or\x8rt\x8t·f\x8fo\x8or\x8r·U\x8US\x8SB\x8B·v\x8vi\x8ia\x8a·B\x8Bo\x8oo\x8ot\x8tl\x8lo\x8oa\x8ad\x8de\x8er\x8r·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1339 | All·USB·support·can·be·disabled·by·adding·the·nousb·argument·to·the·kernel's·boot | 1340 | All·USB·support·can·be·disabled·by·adding·the·nousb·argument·to·the·kernel's·boot |
| 1340 | loader·configuration.·To·do·so,·append·"nousb"·to·the·kernel·line·in·/etc/default/grub | 1341 | loader·configuration.·To·do·so,·append·"nousb"·to·the·kernel·line·in·/etc/default/grub |
| 1341 | as·shown: | 1342 | as·shown: |
| 1342 | kernel·/vmlinuz-VERSION·ro·vga=ext·root=/dev/VolGroup00/LogVol00·rhgb·quiet·nousb | 1343 | kernel·/vmlinuz-VERSION·ro·vga=ext·root=/dev/VolGroup00/LogVol00·rhgb·quiet·nousb |
| 1343 | Warning: ·Disabling·all·kernel·support·for·USB·will·cause·problems·for·systems·with | 1344 | Warning: ·Disabling·all·kernel·support·for·USB·will·cause·problems·for·systems·with |
| 1344 | USB-based·keyboards,·mice,·or·printers.·This·configuration·is·infeasible·for·systems | 1345 | USB-based·keyboards,·mice,·or·printers.·This·configuration·is·infeasible·for·systems |
| Offset 1406, 14 lines modified | Offset 1406, 18 lines modified | ||
| 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1406 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1407 | ···························7.6 | 1407 | ···························7.6 |
| 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1408 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1410 | ···························A.9.1.2 | 1410 | ···························A.9.1.2 |
| 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1411 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1412 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1414 | [customizations.services] | ||
| 1415 | masked·=·["abrtd"] | ||
| 1413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1414 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1415 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1416 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1417 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1418 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1421 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1419 | ····in·the·System | 1422 | ····in·the·System |
| Offset 1500, 18 lines modified | Offset 1504, 14 lines modified | ||
| 1500 | class·disable_abrtd·{ | 1504 | class·disable_abrtd·{ |
| 1501 | ··service·{'abrtd': | 1505 | ··service·{'abrtd': |
| 1502 | ····enable·=>·false, | 1506 | ····enable·=>·false, |
| 1503 | ····ensure·=>·'stopped', | 1507 | ····ensure·=>·'stopped', |
| 1504 | ··} | 1508 | ··} |
| 1505 | } | 1509 | } |
| 1506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1507 | [customizations.services] | ||
| 1508 | masked·=·["abrtd"] | ||
| 1509 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1510 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1510 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the | 1511 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the |
| 1511 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or·/ | 1512 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or·/ |
| 1512 | etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized·system | 1513 | etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized·system |
| 1513 | time.·The·ntpdate·service·can·be·disabled·with·the·following·command: | 1514 | time.·The·ntpdate·service·can·be·disabled·with·the·following·command: |
| Max diff block lines reached; 11726/18427 bytes (63.63%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037d50:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037d60:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037d70:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037d80:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037d90:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037da0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037db0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037dc0:·6620·3230·323 | 00037dc0:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037de0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037df0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e00:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e10:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e20:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e30:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15826, 119 lines modified | Offset 15826, 119 lines modified | ||
| 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003dd10:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | 0003dd20:·6964·6d31·3237·3822·2074·6162·696e·6465··idm1278"·tabinde | ||
| 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003dd30:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003dd40:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003dd50:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003dd60:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003dd70:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003dd80:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003dd90:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003dda0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ddb0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ddc0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ddd0:·646d·3132·3738·223e·3c74·6162·6c65·2063··dm1278"><table·c | |||
| 0003dde0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ddf0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003de00:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003de10:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003de20:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003de30:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003de40:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003de50:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003de60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003de70:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003de80:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003de90:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003dea0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003deb0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003dec0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ded0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003dee0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003def0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003df00:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003df10:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003df20:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003df30:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003df40:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003df50:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003df60:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003df70:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003df80:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003df90:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003dfa0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003dfb0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003dfc0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003dfd0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003dfe0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003dff0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003e000:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003e010:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003e020:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003e030:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003e040:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003e050:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003e060:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003e070:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003e080:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003e090:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003e0a0:·7461·7267·6574·3d22·2369·646d·3132·3739··target="#idm1279 | |||
| 0003e0b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003e0c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003e0d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003e0e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003e0f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003e100:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003e110:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003e120:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003e130:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003e140:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003e150:·6522·2069·643d·2269·646d·3132·3739·223e··e"·id="idm1279"> | |||
| 0003e160:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003e170:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003e180:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003e190:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003e1a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003e1b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003e1c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003e1d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003e1e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003e1f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003e200:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003e210:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003e220:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003e230:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003e240:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003e250:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003e260:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003e270:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003e280:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003e290:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003e2a0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003e2b0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003e2c0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003e2d0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003e2e0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003e2f0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003e300:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003e310:·6d31·3238·3022·2074·6162·696e·6465·783d··m1280"·tabindex= | |||
| 0003e320:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003e330:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003e340:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003e350:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003e360:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003 | 0003dd80:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003 | 0003dd90:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003 | 0003dda0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003 | 0003ddb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003 | 0003ddc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003 | 0003ddd0:·7073·6522·2069·643d·2269·646d·3132·3738··pse"·id="idm1278 | ||
| 0003 | 0003dde0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003 | 0003ddf0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | ||
| 0003e3 | 0003de00:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | ||
| Max diff block lines reached; 331944/348144 bytes (95.35%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 202, 14 lines modified | Offset 202, 19 lines modified | ||
| 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 202 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 203 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 204 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 205 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 207 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 208 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | [[packages]] | ||
| 211 | name·=·"aide" | ||
| 212 | version·=·"*" | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 213 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 214 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 215 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 216 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 217 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | -·name:·Ensure·aide·is·installed | 218 | -·name:·Ensure·aide·is·installed |
| 215 | ··package: | 219 | ··package: |
| Offset 235, 19 lines modified | Offset 240, 14 lines modified | ||
| 235 | include·install_aide | 240 | include·install_aide |
| 236 | class·install_aide·{ | 241 | class·install_aide·{ |
| 237 | ··package·{·'aide': | 242 | ··package·{·'aide': |
| 238 | ····ensure·=>·'installed', | 243 | ····ensure·=>·'installed', |
| 239 | ··} | 244 | ··} |
| 240 | } | 245 | } |
| 241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 242 | [[packages]] | ||
| 243 | name·=·"aide" | ||
| 244 | version·=·"*" | ||
| 245 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 246 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 246 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 247 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 247 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 248 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 248 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 249 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 249 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 250 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 250 | crontab: | 251 | crontab: |
| 251 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 252 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 578, 14 lines modified | Offset 578, 19 lines modified | ||
| 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 578 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 579 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 580 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 581 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 582 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 583 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 584 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | [[packages]] | ||
| 587 | name·=·"sudo" | ||
| 588 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 590 | -·name:·Ensure·sudo·is·installed | 594 | -·name:·Ensure·sudo·is·installed |
| 591 | ··package: | 595 | ··package: |
| Offset 609, 19 lines modified | Offset 614, 14 lines modified | ||
| 609 | include·install_sudo | 614 | include·install_sudo |
| 610 | class·install_sudo·{ | 615 | class·install_sudo·{ |
| 611 | ··package·{·'sudo': | 616 | ··package·{·'sudo': |
| 612 | ····ensure·=>·'installed', | 617 | ····ensure·=>·'installed', |
| 613 | ··} | 618 | ··} |
| 614 | } | 619 | } |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 616 | [[packages]] | ||
| 617 | name·=·"sudo" | ||
| 618 | version·=·"*" | ||
| 619 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 620 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·O\x8On\x8nl\x8ly\x8y·U\x8Us\x8se\x8er\x8rs\x8s·L\x8Lo\x8og\x8gg\x8ge\x8ed\x8d·I\x8In\x8n·T\x8To\x8o·R\x8Re\x8ea\x8al\x8l·t\x8tt\x8ty\x8y·C\x8Ca\x8an\x8n·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8te\x8e·S\x8Su\x8ud\x8do\x8o·-\x8-·s\x8su\x8ud\x8do\x8o·u\x8us\x8se\x8e_\x8_p\x8pt\x8ty\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 620 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a | 621 | The·sudo·use_pty·tag,·when·specified,·will·only·execute·sudo·commands·from·users·logged·in·to·a |
| 621 | real·tty.·This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers | 622 | real·tty.·This·should·be·enabled·by·making·sure·that·the·use_pty·tag·exists·in·/etc/sudoers |
| 622 | configuration·file·or·any·sudo·configuration·snippets·in·/etc/sudoers.d/. | 623 | configuration·file·or·any·sudo·configuration·snippets·in·/etc/sudoers.d/. |
| 623 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from | 624 | Rationale:··Requiring·that·sudo·commands·be·run·in·a·pseudo-terminal·can·prevent·an·attacker·from |
| 624 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. | 625 | ············retaining·access·to·the·user's·terminal·after·the·main·program·has·finished·executing. |
| 625 | Severity: ··medium | 626 | Severity: ··medium |
| Offset 4358, 14 lines modified | Offset 4358, 19 lines modified | ||
| 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4358 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4359 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4360 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4361 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4362 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4363 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4366 | [[packages]] | ||
| 4367 | name·=·"logrotate" | ||
| 4368 | version·=·"*" | ||
| 4365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4366 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4367 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4368 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4369 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4370 | -·name:·Ensure·logrotate·is·installed | 4374 | -·name:·Ensure·logrotate·is·installed |
| 4371 | ··package: | 4375 | ··package: |
| Offset 4390, 19 lines modified | Offset 4395, 14 lines modified | ||
| 4390 | include·install_logrotate | 4395 | include·install_logrotate |
| 4391 | class·install_logrotate·{ | 4396 | class·install_logrotate·{ |
| 4392 | ··package·{·'logrotate': | 4397 | ··package·{·'logrotate': |
| 4393 | ····ensure·=>·'installed', | 4398 | ····ensure·=>·'installed', |
| 4394 | ··} | 4399 | ··} |
| 4395 | } | 4400 | } |
| 4396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4397 | [[packages]] | ||
| 4398 | name·=·"logrotate" | ||
| Max diff block lines reached; 28111/34216 bytes (82.16%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037d30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037d40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037d50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037d60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037d70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037d80:·206f·6620·3230·323 | 00037d80:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037da0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037db0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037dc0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037dd0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037de0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037df0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 19859, 277 lines modified | Offset 19859, 277 lines modified | ||
| 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | 0004d920:·6574·3d22·2369·646d·3131·3337·3422·2074··et="#idm11374"·t | ||
| 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0004d930:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0004d940:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0004d950:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0004d960:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0004d970:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0004d980:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0004d990:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0004d9a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004d9b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004d9c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004d9d0:·2069·643d·2269·646d·3131·3337·3422·3e3c···id="idm11374">< | |||
| 0004d9e0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0004d9 | 0004d990:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0004d9a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0004d9b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0004d9c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0004d9d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0004d9e0:·646d·3131·3337·3422·3e3c·7072·653e·3c63··dm11374"><pre><c | |||
| 0004d9f0:·6f64·653e·0a5b·6375·7374·6f6d·697a·6174··ode>.[customizat | |||
| 0004da00:·696f·6e73·2e73·6572·7669·6365·735d·0a6d··ions.services].m | |||
| 0004da10:·6173·6b65·6420·3d20·5b22·6175·746f·6673··asked·=·["autofs | |||
| 0004da20:·225d·0a3c·2f63·6f64·653e·3c2f·7072·653e··"].</code></pre> | |||
| 0004da30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0004da40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0004da50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0004da60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0004da70:·6765·743d·2223·6964·6d31·3133·3735·2220··get="#idm11375"· | |||
| 0004da80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0004da90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0004daa0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0004dab0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0004dac0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0004dad0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0004dae0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0004daf0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0004db00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0004db10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0004db20:·2220·6964·3d22·6964·6d31·3133·3735·223e··"·id="idm11375"> | |||
| 0004db30:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0004db40:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0004db50:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0004d | 0004db60:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 0004da10:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0004d | 0004db70:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 0004da30:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0004da40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004da50:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0004da60:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004da70:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0004da80:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0004da90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004daa0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0004dab0:·3c74·643e·6469·7361·626c·653c·2f74·643e··<td>disable</td> | |||
| 0004dac0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0004dad0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0004dae0:·4761·7468·6572·2074·6865·2070·6163·6b61··Gather·the·packa | |||
| 0004d | 0004db80:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0004db90:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004dba0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004dbb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0004dbc0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0004dbd0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0004dbe0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004dbf0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0004dc00:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | |||
| 0004dc10:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0004dc20:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0004dc30:·2047·6174·6865·7220·7468·6520·7061·636b···Gather·the·pack | |||
| 0004dc40:·6167·6520·6661·6374·730a·2020·7061·636b··age·facts.··pack | |||
| 0004d | 0004dc50:·6167·655f·6661·6374·733a·0a20·2020·206d··age_facts:.····m | ||
| 0004d | 0004dc60:·616e·6167·6572·3a20·6175·746f·0a20·2074··anager:·auto.··t | ||
| 0004dc70:·6167·733a·0a20·202d·204e·4953·542d·3830··ags:.··-·NIST-80 | |||
| 0004dc80:·302d·3137·312d·332e·342e·360a·2020·2d20··0-171-3.4.6.··-· | |||
| 0004dc90:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0004d | 0004dca0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | ||
| 0004dcb0:·2d35·332d·434d·2d37·2861·290a·2020·2d20··-53-CM-7(a).··-· | |||
| 0004dcc0:·4e49·5354·2d38·3030·2d35·332d·434d·2d37··NIST-800-53-CM-7 | |||
| 0004dcd0:·2862·290a·2020·2d20·4e49·5354·2d38·3030··(b).··-·NIST-800 | |||
| 0004dce0:·2d35·332d·4d50·2d37·0a20·202d·2064·6973··-53-MP-7.··-·dis | |||
| 0004dcf0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0004dd00:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0004dd10:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0004dd20:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0004dd30:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0004dd40:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0004dd50:·2073·6572·7669·6365·5f61·7574·6f66·735f···service_autofs_ | |||
| 0004dd60:·6469·7361·626c·6564·0a0a·2d20·6e61·6d65··disabled..-·name | |||
| 0004dd70:·3a20·4469·7361·626c·6520·7468·6520·4175··:·Disable·the·Au | |||
| 0004dd80:·746f·6d6f·756e·7465·7220·2d20·436f·6c6c··tomounter·-·Coll | |||
| 0004dd90:·6563·7420·7379·7374·656d·6420·5365·7276··ect·systemd·Serv | |||
| 0004dda0:·6963·6573·2050·7265·7365·6e74·2069·6e20··ices·Present·in· | |||
| 0004ddb0:·7468·6520·5379·7374·656d·0a20·2061·6e73··the·System.··ans | |||
| 0004ddc0:·6962·6c65·2e62·7569·6c74·696e·2e63·6f6d··ible.builtin.com | |||
| 0004ddd0:·6d61·6e64·3a20·7379·7374·656d·6374·6c20··mand:·systemctl· | |||
| 0004dde0:·2d71·206c·6973·742d·756e·6974·2d66·696c··-q·list-unit-fil | |||
| 0004ddf0:·6573·202d·2d74·7970·6520·7365·7276·6963··es·--type·servic | |||
| 0004de00:·650a·2020·7265·6769·7374·6572·3a20·7365··e.··register:·se | |||
| 0004de10:·7276·6963·655f·6578·6973·7473·0a20·2063··rvice_exists.··c | |||
| 0004de20:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0004de30:·7365·0a20·2066·6169·6c65·645f·7768·656e··se.··failed_when | |||
| 0004de40:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 0004de50:·2e72·6320·6e6f·7420·696e·205b·302c·2031··.rc·not·in·[0,·1 | |||
| 0004de60:·5d0a·2020·6368·6563·6b5f·6d6f·6465·3a20··].··check_mode:· | |||
| 0004de70:·6661·6c73·650a·2020·7768·656e·3a20·2820··false.··when:·(· | |||
| 0004de80:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0004de90:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0004dea0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0004deb0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0004dec0:·706f·646d·616e·222c·0a20·2020·2022·636f··podman",.····"co | |||
| 0004ded0:·6e74·6169·6e65·7222·5d20·616e·6420·2261··ntainer"]·and·"a | |||
| Max diff block lines reached; 190470/228474 bytes (83.37%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Alibaba·Cloud·Linux·3 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 | 43 | ····*·cpe:/o:alinux:alibaba_cloud_linux:3 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 970, 14 lines modified | Offset 970, 18 lines modified | ||
| 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 970 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 971 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 972 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 973 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 974 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- | 975 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS- |
| 976 | ···························000480-GPOS-00227 | 976 | ···························000480-GPOS-00227 |
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 978 | [customizations.services] | ||
| 979 | masked·=·["autofs"] | ||
| 977 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 980 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 978 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 981 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 979 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 982 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 980 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 983 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 981 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 984 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 982 | -·name:·Gather·the·package·facts | 985 | -·name:·Gather·the·package·facts |
| 983 | ··package_facts: | 986 | ··package_facts: |
| Offset 1093, 18 lines modified | Offset 1097, 14 lines modified | ||
| 1093 | class·disable_autofs·{ | 1097 | class·disable_autofs·{ |
| 1094 | ··service·{'autofs': | 1098 | ··service·{'autofs': |
| 1095 | ····enable·=>·false, | 1099 | ····enable·=>·false, |
| 1096 | ····ensure·=>·'stopped', | 1100 | ····ensure·=>·'stopped', |
| 1097 | ··} | 1101 | ··} |
| 1098 | } | 1102 | } |
| 1099 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1100 | [customizations.services] | ||
| 1101 | masked·=·["autofs"] | ||
| 1102 | Group ·Services· Group·contains·2·groups·and·6·rules | 1103 | Group ·Services· Group·contains·2·groups·and·6·rules |
| 1103 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·best·protection·against·vulnerable·software·is·running·less·software.·This | 1104 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·best·protection·against·vulnerable·software·is·running·less·software.·This |
| 1104 | section·describes·how·to·review·the·software·which·Alibaba·Cloud·Linux·3·installs·on·a | 1105 | section·describes·how·to·review·the·software·which·Alibaba·Cloud·Linux·3·installs·on·a |
| 1105 | system·and·disable·software·which·is·not·needed.·It·then·enumerates·the·software | 1106 | system·and·disable·software·which·is·not·needed.·It·then·enumerates·the·software |
| 1106 | packages·installed·on·a·default·Alibaba·Cloud·Linux·3·system·and·provides·guidance·about | 1107 | packages·installed·on·a·default·Alibaba·Cloud·Linux·3·system·and·provides·guidance·about |
| 1107 | which·ones·can·be·safely·disabled. | 1108 | which·ones·can·be·safely·disabled. |
| Offset 1144, 14 lines modified | Offset 1144, 18 lines modified | ||
| 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1144 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1145 | ···························7.6 | 1145 | ···························7.6 |
| 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1146 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1147 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1148 | ···························A.9.1.2 | 1148 | ···························A.9.1.2 |
| 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1149 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1150 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1152 | [customizations.services] | ||
| 1153 | masked·=·["abrtd"] | ||
| 1151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1156 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present | 1159 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services·Present |
| 1157 | ····in·the·System | 1160 | ····in·the·System |
| Offset 1238, 18 lines modified | Offset 1242, 14 lines modified | ||
| 1238 | class·disable_abrtd·{ | 1242 | class·disable_abrtd·{ |
| 1239 | ··service·{'abrtd': | 1243 | ··service·{'abrtd': |
| 1240 | ····enable·=>·false, | 1244 | ····enable·=>·false, |
| 1241 | ····ensure·=>·'stopped', | 1245 | ····ensure·=>·'stopped', |
| 1242 | ··} | 1246 | ··} |
| 1243 | } | 1247 | } |
| 1244 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1245 | [customizations.services] | ||
| 1246 | masked·=·["abrtd"] | ||
| 1247 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1248 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1248 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the | 1249 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the |
| 1249 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or·/ | 1250 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or·/ |
| 1250 | etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized·system | 1251 | etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized·system |
| 1251 | time.·The·ntpdate·service·can·be·disabled·with·the·following·command: | 1252 | time.·The·ntpdate·service·can·be·disabled·with·the·following·command: |
| 1252 | $·sudo·systemctl·mask·--now·ntpdate.service | 1253 | $·sudo·systemctl·mask·--now·ntpdate.service |
| 1253 | ············The·ntpdate·service·may·only·be·suitable·for·systems·which·are·rebooted | 1254 | ············The·ntpdate·service·may·only·be·suitable·for·systems·which·are·rebooted |
| Offset 1273, 14 lines modified | Offset 1273, 18 lines modified | ||
| 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR | 1273 | ···························SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR |
| 1274 | ···························7.6 | 1274 | ···························7.6 |
| 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, | 1275 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1, |
| 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, | 1276 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2, |
| 1277 | ···························A.9.1.2 | 1277 | ···························A.9.1.2 |
| 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1278 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1279 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1281 | [customizations.services] | ||
| 1282 | masked·=·["ntpdate"] | ||
| 1280 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1283 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1281 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1284 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1282 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1285 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1283 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1286 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1284 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1287 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1285 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1288 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1286 | ····System | 1289 | ····System |
| Offset 1371, 18 lines modified | Offset 1375, 14 lines modified | ||
| 1371 | class·disable_ntpdate·{ | 1375 | class·disable_ntpdate·{ |
| 1372 | ··service·{'ntpdate': | 1376 | ··service·{'ntpdate': |
| 1373 | ····enable·=>·false, | 1377 | ····enable·=>·false, |
| 1374 | ····ensure·=>·'stopped', | 1378 | ····ensure·=>·'stopped', |
| 1375 | ··} | 1379 | ··} |
| 1376 | } | 1380 | } |
| 1377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1378 | [customizations.services] | ||
| 1379 | masked·=·["ntpdate"] | ||
| 1380 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·O\x8Od\x8dd\x8d·J\x8Jo\x8ob\x8b·D\x8Da\x8ae\x8em\x8mo\x8on\x8n·(\x8(o\x8od\x8dd\x8dj\x8jo\x8ob\x8bd\x8d)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1381 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·O\x8Od\x8dd\x8d·J\x8Jo\x8ob\x8b·D\x8Da\x8ae\x8em\x8mo\x8on\x8n·(\x8(o\x8od\x8dd\x8dj\x8jo\x8ob\x8bd\x8d)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1381 | The·oddjobd·service·exists·to·provide·an·interface·and·access·control·mechanism·through | 1382 | The·oddjobd·service·exists·to·provide·an·interface·and·access·control·mechanism·through |
| 1382 | which·specified·privileged·tasks·can·run·tasks·for·unprivileged·client·applications. | 1383 | which·specified·privileged·tasks·can·run·tasks·for·unprivileged·client·applications. |
| 1383 | Communication·with·oddjobd·through·the·system·message·bus.·The·oddjobd·service·can·be | 1384 | Communication·with·oddjobd·through·the·system·message·bus.·The·oddjobd·service·can·be |
| 1384 | disabled·with·the·following·command: | 1385 | disabled·with·the·following·command: |
| Max diff block lines reached; 7959/14596 bytes (54.53%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d10:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d20:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d30:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037d40:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037d50:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037d60:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037d70:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037d80:·6f66·2032·3032·3 | 00037d80:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037d90:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037da0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037db0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037dc0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037dd0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037de0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037df0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15458, 119 lines modified | Offset 15458, 119 lines modified | ||
| 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003c610:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003c620:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003c630:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003c640:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003c650:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003c660:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003c670:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003c680:·656d·6564·6961·7469·6f6e·204 | 0003c680:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003c690:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003c690:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003c6a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c6b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c6c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c6d0:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003c6e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c6f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c700:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c710:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c720:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c730:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c740:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c750:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c760:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003c770:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003c780:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c790:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c7a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c7b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c7c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c7d0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003c7e0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003c7f0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003c800:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003c810:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003c820:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003c830:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003c840:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003c850:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003c860:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003c870:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003c880:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c890:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003c8a0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c8b0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c8c0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c8d0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c8e0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c8f0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c900:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c910:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c920:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003c930:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003c940:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003c950:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003c960:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c970:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c980:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c990:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c9a0:·7461·7267·6574·3d22·2369·646d·3133·3339··target="#idm1339 | |||
| 0003c9b0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c9c0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c9d0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c9e0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003c9f0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ca00:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ca10:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003ca | 0003c6a0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003c | 0003c6b0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003ca40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ca50:·6522·2069·643d·2269·646d·3133·3339·223e··e"·id="idm1339"> | |||
| 0003ca60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ca70:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003ca80:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003ca90:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003caa0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003cab0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003cac0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003cad0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003cae0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003caf0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003cb00:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003cb10:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003cb20:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003cb30:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003cb40:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003cb50:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003cb60:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003cb70:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003cb80:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003cb90:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003cba0:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003cbb0:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003cbc0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003cbd0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003cbe0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003cbf0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003cc00:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003cc10:·6d31·3334·3022·2074·6162·696e·6465·783d··m1340"·tabindex= | |||
| 0003cc20:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003cc30:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003cc40:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003cc50:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003cc60:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003cc70:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003cc80:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003cc90:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003cca0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c | 0003c6c0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003c | 0003c6d0:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | ||
| 0003c | 0003c6e0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| 0003c | 0003c6f0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | ||
| Max diff block lines reached; 229522/245722 bytes (93.41%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·23 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:23 | 43 | ····*·cpe:/o:anolis:anolis_os:23 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 191, 19 lines modified | Offset 196, 14 lines modified | ||
| 191 | include·install_aide | 196 | include·install_aide |
| 192 | class·install_aide·{ | 197 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 198 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 199 | ····ensure·=>·'installed', |
| 195 | ··} | 200 | ··} |
| 196 | } | 201 | } |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | [[packages]] | ||
| 199 | name·=·"aide" | ||
| 200 | version·=·"*" | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 203 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 203 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 204 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 204 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 205 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 205 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 206 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 206 | crontab: | 207 | crontab: |
| 207 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 208 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4550, 19 lines modified | Offset 4555, 14 lines modified | ||
| 4550 | include·install_logrotate | 4555 | include·install_logrotate |
| 4551 | class·install_logrotate·{ | 4556 | class·install_logrotate·{ |
| 4552 | ··package·{·'logrotate': | 4557 | ··package·{·'logrotate': |
| 4553 | ····ensure·=>·'installed', | 4558 | ····ensure·=>·'installed', |
| 4554 | ··} | 4559 | ··} |
| 4555 | } | 4560 | } |
| 4556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4557 | [[packages]] | ||
| 4558 | name·=·"logrotate" | ||
| 4559 | version·=·"*" | ||
| 4560 | Group ·Network·Configuration·and·Firewalls· Group·contains·12·groups·and·16·rules | 4561 | Group ·Network·Configuration·and·Firewalls· Group·contains·12·groups·and·16·rules |
| 4561 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the | 4562 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the |
| 4562 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about | 4563 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about |
| 4563 | networking·which·must·be·made·when·configuring·a·system. | 4564 | networking·which·must·be·made·when·configuring·a·system. |
| 4564 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security | 4565 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security |
| 4565 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to | 4566 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4696, 19 lines modified | Offset 4701, 14 lines modified | ||
| 4696 | include·install_firewalld | 4701 | include·install_firewalld |
| 4697 | class·install_firewalld·{ | 4702 | class·install_firewalld·{ |
| 4698 | ··package·{·'firewalld': | 4703 | ··package·{·'firewalld': |
| 4699 | ····ensure·=>·'installed', | 4704 | ····ensure·=>·'installed', |
| 4700 | ··} | 4705 | ··} |
| 4701 | } | 4706 | } |
| 4702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4703 | [[packages]] | ||
| 4704 | name·=·"firewalld" | ||
| Max diff block lines reached; 16832/22895 bytes (73.52%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037c80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037c90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037ca0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037cb0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037cc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037cd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037ce0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037cf0:·6173·206f·6620·3230·323 | 00037cf0:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037d40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037d50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037d60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15049, 119 lines modified | Offset 15049, 119 lines modified | ||
| 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003ac80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | 0003ac90:·3133·3338·2220·7461·6269·6e64·6578·3d22··1338"·tabindex=" | ||
| 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003aca0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003acb0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003acc0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003acd0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ace0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003acf0:·6469·6174·696f·6e20·4 | 0003acf0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003ad00:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003ad40:·3333·3822·3e3c·7461·626c·6520·636c·6173··338"><table·clas | |||
| 0003ad50:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003ad60:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003ad70:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003ad80:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003ad90:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003ada0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003adb0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003adc0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003add0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ade0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003adf0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003ae00:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003ae10:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003ae20:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003ae30:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003ae40:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003ae50:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003ae60:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003ae70:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003ae80:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003ae90:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003aea0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003aeb0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003aec0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003aed0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003aee0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003aef0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003af00:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003af10:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003af20:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003af30:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003af40:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003af50:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003af60:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003af70:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003af80:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003af90:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003afa0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003afb0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003afc0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003afd0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003afe0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003aff0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b000:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b010:·6765·743d·2223·6964·6d31·3333·3922·2074··get="#idm1339"·t | |||
| 0003b020:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b030:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b040:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b050:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b060:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b070:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b080:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003 | 0003ad10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 0003 | 0003ad20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 0003 | 0003ad30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 0003ad40:·2220·6964·3d22·6964·6d31·3333·3822·3e3c··"·id="idm1338">< | |||
| 0003ad50:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003ad60:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003ad70:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003ad80:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003ad90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ada0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003adb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003adc0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003add0:·7267·6574·3d22·2369·646d·3133·3339·2220··rget="#idm1339"· | |||
| 0003ade0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003adf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003ae00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ae10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003ae20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003ae30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003ae40:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003ae50:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ae60:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ae70:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003 | 0003ae80:·2220·6964·3d22·6964·6d31·3333·3922·3e3c··"·id="idm1339">< | ||
| 0003 | 0003ae90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0003 | 0003aea0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0003b0 | 0003aeb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | ||
| 0003 | 0003aec0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | ||
| 0003 | 0003aed0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | ||
| 0003 | 0003aee0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003 | 0003aef0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003af00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003 | 0003af10:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003af20:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003 | 0003af30:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003 | 0003af40:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003af50:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003 | 0003af60:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | ||
| 0003 | 0003af70:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 0003b1c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b1d0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b1e0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b1f0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b200:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b210:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| Max diff block lines reached; 632874/649074 bytes (97.50%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·23 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:23 | 41 | ····*·cpe:/o:anolis:anolis_os:23 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 147, 19 lines modified | Offset 152, 14 lines modified | ||
| 147 | include·install_aide | 152 | include·install_aide |
| 148 | class·install_aide·{ | 153 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 154 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 155 | ····ensure·=>·'installed', |
| 151 | ··} | 156 | ··} |
| 152 | } | 157 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 159 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 159 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 160 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 160 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 161 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 161 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 162 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 162 | crontab: | 163 | crontab: |
| 163 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 164 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4886, 19 lines modified | Offset 4891, 14 lines modified | ||
| 4886 | include·install_rsyslog | 4891 | include·install_rsyslog |
| 4887 | class·install_rsyslog·{ | 4892 | class·install_rsyslog·{ |
| 4888 | ··package·{·'rsyslog': | 4893 | ··package·{·'rsyslog': |
| 4889 | ····ensure·=>·'installed', | 4894 | ····ensure·=>·'installed', |
| 4890 | ··} | 4895 | ··} |
| 4891 | } | 4896 | } |
| 4892 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4893 | [[packages]] | ||
| 4894 | name·=·"rsyslog" | ||
| 4895 | version·=·"*" | ||
| 4896 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 4897 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 4897 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Anolis·OS·23.·The·rsyslog·service | 4898 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Anolis·OS·23.·The·rsyslog·service |
| 4898 | can·be·enabled·with·the·following·command: | 4899 | can·be·enabled·with·the·following·command: |
| 4899 | $·sudo·systemctl·enable·rsyslog.service | 4900 | $·sudo·systemctl·enable·rsyslog.service |
| 4900 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are | 4901 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are |
| 4901 | ············essential·to·system·administration. | 4902 | ············essential·to·system·administration. |
| 4902 | Severity: ··medium | 4903 | Severity: ··medium |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4955, 18 lines modified | Offset 4959, 14 lines modified | ||
| 4955 | class·enable_rsyslog·{ | 4959 | class·enable_rsyslog·{ |
| 4956 | ··service·{'rsyslog': | 4960 | ··service·{'rsyslog': |
| 4957 | ····enable·=>·true, | 4961 | ····enable·=>·true, |
| 4958 | ····ensure·=>·'running', | 4962 | ····ensure·=>·'running', |
| 4959 | ··} | 4963 | ··} |
| 4960 | } | 4964 | } |
| 4961 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4962 | [customizations.services] | ||
| 4963 | enabled·=·["rsyslog"] | ||
| 4964 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·29·rules | 4965 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·29·rules |
| Max diff block lines reached; 43634/49979 bytes (87.30%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037d00:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037d10:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037d20:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037d30:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d40:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d50:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d70:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d70:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d80:·2d30·3 | 00037d80:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d90:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037da0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037db0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037dc0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037dd0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037de0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037df0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15457, 119 lines modified | Offset 15457, 119 lines modified | ||
| 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c600:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | 0003c610:·743d·2223·6964·6d31·3333·3822·2074·6162··t="#idm1338"·tab | ||
| 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c620:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c630:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c640:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c650:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c660:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c670:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c680:· | 0003c680:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003c690:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c6a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c6b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c6c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c6d0:·3133·3338·223e·3c70·7265·3e3c·636f·6465··1338"><pre><code | |||
| 0003c6e0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003c6f0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003c700:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003c710:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c720:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c730:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c740:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c750:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c760:·6d31·3333·3922·2074·6162·696e·6465·783d··m1339"·tabindex= | |||
| 0003c770:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c780:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c790:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c7a0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c7b0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c7c0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003c7d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c7e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c7f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c800:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c810:·3133·3339·223e·3c74·6162·6c65·2063·6c61··1339"><table·cla | |||
| 0003c820:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c830:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c840:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c850:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c860:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c870:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c880:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c890:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003c8a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c8b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003c8c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c8d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c8e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c8f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c900:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003c910:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003c920:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003c930:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003c940:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003c950:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003c960:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003c970:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003c980:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003c990:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003c9a0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003c9b0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003c9c0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003c9d0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003c9e0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003c9f0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003ca00:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003ca10:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003ca20:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003ca30:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003ca40:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003ca50:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003ca60:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003ca70:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003ca80:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003ca90:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003caa0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003cab0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003cac0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003cad0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003cae0:·7267·6574·3d22·2369·646d·3133·3430·2220··rget="#idm1340"· | |||
| 0003caf0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003cb00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003cb10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003cb20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003cb30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003cb40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003cb50:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003c6 | 0003cb60:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003c | 0003cb70:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003c | 0003cb80:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003c | 0003cb90:·2069·643d·2269·646d·3133·3430·223e·3c74···id="idm1340"><t | ||
| 0003c | 0003cba0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0003c | 0003cbb0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0003c | 0003cbc0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0003c | 0003cbd0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0003c | 0003cbe0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0003c | 0003cbf0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003c | 0003cc00:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003cc10:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c | 0003cc20:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003c | 0003cc30:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003c | 0003cc40:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003c | 0003cc50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003c | 0003cc60:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0003c | 0003cc70:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | ||
| 0003c | 0003cc80:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003cc90:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003cca0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003c7c0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003c7d0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003c7e0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| Max diff block lines reached; 229384/245722 bytes (93.35%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Anolis·OS·8 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:anolis:anolis_os:8 | 43 | ····*·cpe:/o:anolis:anolis_os:8 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 158, 14 lines modified | Offset 158, 19 lines modified | ||
| 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 158 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 159 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 160 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 161 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 162 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 163 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 164 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | -·name:·Ensure·aide·is·installed | 174 | -·name:·Ensure·aide·is·installed |
| 171 | ··package: | 175 | ··package: |
| Offset 191, 19 lines modified | Offset 196, 14 lines modified | ||
| 191 | include·install_aide | 196 | include·install_aide |
| 192 | class·install_aide·{ | 197 | class·install_aide·{ |
| 193 | ··package·{·'aide': | 198 | ··package·{·'aide': |
| 194 | ····ensure·=>·'installed', | 199 | ····ensure·=>·'installed', |
| 195 | ··} | 200 | ··} |
| 196 | } | 201 | } |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 198 | [[packages]] | ||
| 199 | name·=·"aide" | ||
| 200 | version·=·"*" | ||
| 201 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 202 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 202 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 203 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 203 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 204 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 204 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 205 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 205 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 206 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 206 | crontab: | 207 | crontab: |
| 207 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 208 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 4518, 14 lines modified | Offset 4518, 19 lines modified | ||
| 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4518 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4519 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4520 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4521 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 | 4522 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-10.7 |
| 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 4523 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 | 4524 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········10.5.1 |
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4526 | [[packages]] | ||
| 4527 | name·=·"logrotate" | ||
| 4528 | version·=·"*" | ||
| 4525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4530 | -·name:·Ensure·logrotate·is·installed | 4534 | -·name:·Ensure·logrotate·is·installed |
| 4531 | ··package: | 4535 | ··package: |
| Offset 4550, 19 lines modified | Offset 4555, 14 lines modified | ||
| 4550 | include·install_logrotate | 4555 | include·install_logrotate |
| 4551 | class·install_logrotate·{ | 4556 | class·install_logrotate·{ |
| 4552 | ··package·{·'logrotate': | 4557 | ··package·{·'logrotate': |
| 4553 | ····ensure·=>·'installed', | 4558 | ····ensure·=>·'installed', |
| 4554 | ··} | 4559 | ··} |
| 4555 | } | 4560 | } |
| 4556 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4557 | [[packages]] | ||
| 4558 | name·=·"logrotate" | ||
| 4559 | version·=·"*" | ||
| 4560 | Group ·Network·Configuration·and·Firewalls· Group·contains·12·groups·and·16·rules | 4561 | Group ·Network·Configuration·and·Firewalls· Group·contains·12·groups·and·16·rules |
| 4561 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the | 4562 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Most·systems·must·be·connected·to·a·network·of·some·sort,·and·this·brings·with·it·the |
| 4562 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about | 4563 | substantial·risk·of·network·attack.·This·section·discusses·the·security·impact·of·decisions·about |
| 4563 | networking·which·must·be·made·when·configuring·a·system. | 4564 | networking·which·must·be·made·when·configuring·a·system. |
| 4564 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security | 4565 | This·section·also·discusses·firewalls,·network·access·controls,·and·other·network·security |
| 4565 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to | 4566 | frameworks,·which·allow·system-level·rules·to·be·written·that·can·limit·an·attackers'·ability·to |
| Offset 4665, 14 lines modified | Offset 4665, 19 lines modified | ||
| 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4665 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4666 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4667 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4668 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4670 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4673 | [[packages]] | ||
| 4674 | name·=·"firewalld" | ||
| 4675 | version·=·"*" | ||
| 4672 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4673 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4677 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4674 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4678 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4675 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4679 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4676 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4680 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4677 | -·name:·Ensure·firewalld·is·installed | 4681 | -·name:·Ensure·firewalld·is·installed |
| 4678 | ··package: | 4682 | ··package: |
| Offset 4696, 19 lines modified | Offset 4701, 14 lines modified | ||
| 4696 | include·install_firewalld | 4701 | include·install_firewalld |
| 4697 | class·install_firewalld·{ | 4702 | class·install_firewalld·{ |
| 4698 | ··package·{·'firewalld': | 4703 | ··package·{·'firewalld': |
| 4699 | ····ensure·=>·'installed', | 4704 | ····ensure·=>·'installed', |
| 4700 | ··} | 4705 | ··} |
| 4701 | } | 4706 | } |
| 4702 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4703 | [[packages]] | ||
| 4704 | name·=·"firewalld" | ||
| Max diff block lines reached; 16832/22893 bytes (73.52%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037c80:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037c90:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037ca0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037cb0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037cc0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037cd0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ce0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037cf0:·323 | 00037cf0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037d00:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037d10:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037d20:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037d30:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037d40:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037d50:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037d60:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 119 lines modified | Offset 15048, 119 lines modified | ||
| 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003ac70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | 0003ac80:·6964·6d31·3333·3822·2074·6162·696e·6465··idm1338"·tabinde | ||
| 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003ac90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003aca0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003acb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003acc0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003acd0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003ace0:·656d·6564·6961·7469·6f6e·204 | 0003ace0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003acf0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003ad00:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003ad10:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ad20:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003ad30:·646d·3133·3338·223e·3c74·6162·6c65·2063··dm1338"><table·c | |||
| 0003ad40:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003ad50:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003ad60:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003ad70:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003ad80:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003ad90:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003ada0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003adb0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003adc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003add0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003ade0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003adf0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003a | 0003acf0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003ad00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ad10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ad20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ad30:·7073·6522·2069·643d·2269·646d·3133·3338··pse"·id="idm1338 | |||
| 0003ad40:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003ad50:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003ad60:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003ad70:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003ad80:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003ad90:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003ada0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003adb0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003adc0:·2d74·6172·6765·743d·2223·6964·6d31·3333··-target="#idm133 | |||
| 0003add0:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | |||
| 0003ade0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003adf0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003ae00:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003ae10:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003ae20:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003ae30:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003ae40:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ae50:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ae60:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003ae70:·7073·6522·2069·643d·2269·646d·3133·3339··pse"·id="idm1339 | |||
| 0003ae80:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae90:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003aea0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003aeb0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003aec0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003aed0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003aee0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003aef0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003af00:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003af20:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003a | 0003af30:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003ae20:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003ae30:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003ae40:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003ae50:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003ae60:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003ae70:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003ae80:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003ae90:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003aea0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003aeb0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003aec0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003aed0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003aee0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003aef0:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003af00:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af10:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af20:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003af30:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003af40:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003af50:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003af60:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003af70:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003af80:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003af90:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003afa0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003afb0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003afc0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003afd0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003afe0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003aff0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b000:·7461·7267·6574·3d22·2369·646d·3133·3339··target="#idm1339 | |||
| 0003b010:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b020:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b030:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b040:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b050:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b060:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b070:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b080:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b090:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b0a0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b0b0:·6522·2069·643d·2269·646d·3133·3339·223e··e"·id="idm1339"> | |||
| 0003b0c0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b0d0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b0e0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b0f0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b100:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b110:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b120:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| Max diff block lines reached; 632460/648660 bytes (97.50%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Anolis·OS·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:anolis:anolis_os:8 | 41 | ····*·cpe:/o:anolis:anolis_os:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 147, 19 lines modified | Offset 152, 14 lines modified | ||
| 147 | include·install_aide | 152 | include·install_aide |
| 148 | class·install_aide·{ | 153 | class·install_aide·{ |
| 149 | ··package·{·'aide': | 154 | ··package·{·'aide': |
| 150 | ····ensure·=>·'installed', | 155 | ····ensure·=>·'installed', |
| 151 | ··} | 156 | ··} |
| 152 | } | 157 | } |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 158 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 159 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 159 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 160 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 160 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 161 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 161 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 162 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 162 | crontab: | 163 | crontab: |
| 163 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 164 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 4856, 14 lines modified | Offset 4856, 19 lines modified | ||
| 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 4856 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 4857 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 4858 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 4859 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 4860 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 4861 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 4862 | ···························00227 | 4862 | ···························00227 |
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4864 | [[packages]] | ||
| 4865 | name·=·"rsyslog" | ||
| 4866 | version·=·"*" | ||
| 4863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4868 | -·name:·Ensure·rsyslog·is·installed | 4872 | -·name:·Ensure·rsyslog·is·installed |
| 4869 | ··package: | 4873 | ··package: |
| Offset 4886, 19 lines modified | Offset 4891, 14 lines modified | ||
| 4886 | include·install_rsyslog | 4891 | include·install_rsyslog |
| 4887 | class·install_rsyslog·{ | 4892 | class·install_rsyslog·{ |
| 4888 | ··package·{·'rsyslog': | 4893 | ··package·{·'rsyslog': |
| 4889 | ····ensure·=>·'installed', | 4894 | ····ensure·=>·'installed', |
| 4890 | ··} | 4895 | ··} |
| 4891 | } | 4896 | } |
| 4892 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4893 | [[packages]] | ||
| 4894 | name·=·"rsyslog" | ||
| 4895 | version·=·"*" | ||
| 4896 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 4897 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 4897 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Anolis·OS·8.·The·rsyslog·service·can | 4898 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·Anolis·OS·8.·The·rsyslog·service·can |
| 4898 | be·enabled·with·the·following·command: | 4899 | be·enabled·with·the·following·command: |
| 4899 | $·sudo·systemctl·enable·rsyslog.service | 4900 | $·sudo·systemctl·enable·rsyslog.service |
| 4900 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are | 4901 | Rationale:··The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are |
| 4901 | ············essential·to·system·administration. | 4902 | ············essential·to·system·administration. |
| 4902 | Severity: ··medium | 4903 | Severity: ··medium |
| Offset 4912, 14 lines modified | Offset 4912, 18 lines modified | ||
| 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 4912 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.2.6.7,·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 4913 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 4914 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 4915 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 4916 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 4917 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4918 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4920 | [customizations.services] | ||
| 4921 | enabled·=·["rsyslog"] | ||
| 4919 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4922 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4920 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4923 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4921 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4924 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4922 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4925 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4923 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4926 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4924 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 4927 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 4925 | ··block: | 4928 | ··block: |
| Offset 4955, 18 lines modified | Offset 4959, 14 lines modified | ||
| 4955 | class·enable_rsyslog·{ | 4959 | class·enable_rsyslog·{ |
| 4956 | ··service·{'rsyslog': | 4960 | ··service·{'rsyslog': |
| 4957 | ····enable·=>·true, | 4961 | ····enable·=>·true, |
| 4958 | ····ensure·=>·'running', | 4962 | ····ensure·=>·'running', |
| 4959 | ··} | 4963 | ··} |
| 4960 | } | 4964 | } |
| 4961 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4962 | [customizations.services] | ||
| 4963 | enabled·=·["rsyslog"] | ||
| 4964 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·29·rules | 4965 | Group ·Network·Configuration·and·Firewalls· Group·contains·11·groups·and·29·rules |
| Max diff block lines reached; 43631/49973 bytes (87.31%) of diff not shown. | |||
| Offset 14565, 15 lines modified | Offset 14565, 15 lines modified | ||
| 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038eb0:·3230·323 | 00038eb0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15321, 236 lines modified | Offset 15321, 236 lines modified | ||
| 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003bd80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 0003bd90:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003bda0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003bdb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003bdc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003bdd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003bde0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003bdf0:·656d·6564·6961·7469·6f6e·204 | 0003bdf0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003be00:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003be10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003be20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003be30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003be40:·646d·3830·3032·223e·3c74·6162·6c65·2063··dm8002"><table·c | |||
| 0003be50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003be60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003be70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003be80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003be90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bea0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003be | 0003be00:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003be10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003be20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003be30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003be40:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 0003be50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003be60:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003be70:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003be80:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003be90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bea0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003beb0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bec0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bed0:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 0003bee0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003bef0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bf00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bf10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bf20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bf30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bf40:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 0003bf50:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bf60:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bf70:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bf80:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 0003bf90:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003bfa0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bfb0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bfc0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bfd0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bfe0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003bff0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c000:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003c010:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003c020:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003c030:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003c040:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003c050:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003c060:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003c070:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003c080:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003c090:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 0003c0a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c0b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c0c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c0d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c0e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c0f0:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 0003c100:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c110:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c120:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c130:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c140:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c150:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003c160:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003c170:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003c180:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003c190:·7365·2220·6964·3d22·6964·6d38·3030·3422··se"·id="idm8004" | |||
| 0003c1a0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003c1b0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003c1c0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003c1d0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003c1e0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003 | 0003c1f0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003 | 0003c200:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bee0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bef0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bf00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bf10:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bf20:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bf30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bf40:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003bf50:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003bf60:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003bf70:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003bf80:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003bf90:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003bfa0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003bfb0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003bfc0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003bfd0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003bfe0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003bff0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 0003c000:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003c010:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 0003c020:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 0003c030:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003c040:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003c050:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003c060:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003c070:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003c080:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| Max diff block lines reached; 5481946/5514292 bytes (99.41%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 87 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 88 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 131, 14 lines modified | Offset 131, 33 lines modified | ||
| 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 131 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 133 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ············_\x8c_\x8i_\x8s············5.3.1 | 135 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 160 | ··package: |
| Offset 153, 38 lines modified | Offset 172, 14 lines modified | ||
| 153 | ··-·PCI-DSSv4-11.5.2 | 172 | ··-·PCI-DSSv4-11.5.2 |
| 154 | ··-·enable_strategy | 173 | ··-·enable_strategy |
| 155 | ··-·low_complexity | 174 | ··-·low_complexity |
| 156 | ··-·low_disruption | 175 | ··-·low_disruption |
| 157 | ··-·medium_severity | 176 | ··-·medium_severity |
| 158 | ··-·no_reboot_needed | 177 | ··-·no_reboot_needed |
| 159 | ··-·package_aide_installed | 178 | ··-·package_aide_installed |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | include·install_aide | ||
| 166 | class·install_aide·{ | ||
| 167 | ··package·{·'aide': | ||
| 168 | ····ensure·=>·'installed', | ||
| 169 | ··} | ||
| 170 | } | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | [[packages]] | ||
| 173 | name·=·"aide" | ||
| 174 | version·=·"*" | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 180 | package·install·aide | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | #·Remediation·is·applicable·only·in·certain·platforms | 184 | #·Remediation·is·applicable·only·in·certain·platforms |
| 187 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 185 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 192, 21 lines modified | Offset 187, 26 lines modified | ||
| 192 | if·!·rpm·-q·--quiet·"aide"·;·then | 187 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 193 | ····yum·install·-y·"aide" | 188 | ····yum·install·-y·"aide" |
| 194 | fi | 189 | fi |
| 195 | else | 190 | else |
| 196 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 191 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 197 | fi | 192 | fi |
| 198 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 199 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 200 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 201 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 202 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 198 | include·install_aide | ||
| 203 | 199 | class·install_aide·{ | |
| 200 | ··package·{·'aide': | ||
| 201 | ····ensure·=>·'installed', | ||
| 202 | ··} | ||
| 203 | } | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Run·the·following·command·to·generate·a·new·database: | 205 | Run·the·following·command·to·generate·a·new·database: |
| 206 | $·sudo·/usr/sbin/aide·--init | 206 | $·sudo·/usr/sbin/aide·--init |
| 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 207 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 208 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 209 | To·initiate·a·manual·check,·run·the·following·command: | 209 | To·initiate·a·manual·check,·run·the·following·command: |
| 210 | $·sudo·/usr/sbin/aide·--check | 210 | $·sudo·/usr/sbin/aide·--check |
| Offset 363, 87 lines modified | Offset 363, 87 lines modified | ||
| 363 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 363 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 364 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 364 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 366 | [[customizations.filesystem]] | 366 | [[customizations.filesystem]] |
| 367 | mountpoint·=·"/home" | 367 | mountpoint·=·"/home" |
| 368 | size·=·1073741824 | 368 | size·=·1073741824 |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 370 | logvol·/home·1024 | ||
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 277340/282937 bytes (98.02%) of diff not shown. | |||
| Offset 14564, 15 lines modified | Offset 14564, 15 lines modified | ||
| 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e30:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e40:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e50:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e60:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e70:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038e80:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038e90:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ea0:·3230·323 | 00038ea0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038eb0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ec0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ed0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038ee0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038ef0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f00:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f10:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15326, 236 lines modified | Offset 15326, 236 lines modified | ||
| 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003bdd0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | 0003bde0:·3d22·2369·646d·3830·3032·2220·7461·6269··="#idm8002"·tabi | ||
| 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003bdf0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003be00:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003be10:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003be20:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003be30:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003be40:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003be50:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003be60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be | 0003be50:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003be60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bea0:·3030·3222·3e3c·7072·653e·3c63·6f64·653e··002"><pre><code> | |||
| 0003beb0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003bec0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003bed0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003bee0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003bef0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003bf00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003bf10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003bf20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003bf30:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003bf40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003bf50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003bf60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003bf70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003bf80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003bf90:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 0003bfa0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bfb0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b | 0003bfc0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003be90:·3d22·6964·6d38·3030·3222·3e3c·7461·626c··="idm8002"><tabl | |||
| 0003bea0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003beb0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bec0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bed0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bee0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003bfd0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003bfe0:·3830·3033·223e·3c74·6162·6c65·2063·6c61··8003"><table·cla | |||
| 0003bff0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c000:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c010:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c020:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c030:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c040:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c050:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003c060:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003 | 0003c070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003 | 0003c080:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003c090:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003c0a0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003c0b0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003c0c0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003c0d0:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003c0e0:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 0003c0f0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003c100:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003c110:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003c120:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003c130:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003c140:·6574·3d22·2369·646d·3830·3034·2220·7461··et="#idm8004"·ta | |||
| 0003c150:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003c160:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003c170:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003c180:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003c190:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003c1a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003c1b0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003c1c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c1d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c1e0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c1f0:·3034·223e·3c74·6162·6c65·2063·6c61·7373··04"><table·class | |||
| 0003c200:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c210:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c220:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c230:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c240:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003 | 0003c250:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003bf30:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bf40:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bf60:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bf70:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bf80:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf90:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003bfa0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003bfb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003bfc0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003bfd0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003bfe0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003bff0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003c000:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003c010:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003c020:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003c030:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003c040:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003c050:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003c060:·412d·5354·4947·2d52·4845·4c2d·3038·2d30··A-STIG-RHEL-08-0 | |||
| 0003c070:·3130·3335·390a·2020·2d20·4e49·5354·2d38··10359.··-·NIST-8 | |||
| 0003c080:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003c090:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003c0a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003c0b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003c0c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003c0d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003c0e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003c0f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003c100:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| Max diff block lines reached; 5574380/5606726 bytes (99.42%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 160 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 161 | ··package: |
| Offset 154, 38 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 188, 26 lines modified | ||
| 193 | if·!·rpm·-q·--quiet·"aide"·;·then | 188 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 194 | ····yum·install·-y·"aide" | 189 | ····yum·install·-y·"aide" |
| 195 | fi | 190 | fi |
| 196 | else | 191 | else |
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 198 | fi | 193 | fi |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | include·install_aide | ||
| 204 | 200 | class·install_aide·{ | |
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 841, 87 lines modified | Offset 841, 87 lines modified | ||
| 841 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 841 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 842 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 842 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 843 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 843 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 844 | [[customizations.filesystem]] | 844 | [[customizations.filesystem]] |
| 845 | mountpoint·=·"/home" | 845 | mountpoint·=·"/home" |
| 846 | size·=·1073741824 | 846 | size·=·1073741824 |
| 847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 848 | logvol·/home·1024 | ||
| 849 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 847 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 288217/293769 bytes (98.11%) of diff not shown. | |||
| Offset 14566, 15 lines modified | Offset 14566, 15 lines modified | ||
| 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038e50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038e60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038e70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038e80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038e90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038ea0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038eb0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038ec0:·3230·323 | 00038ec0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038ed0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038ee0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038ef0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038f00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038f10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038f20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038f30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15317, 235 lines modified | Offset 15317, 235 lines modified | ||
| 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bd40:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bd50:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003bd60:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003bd70:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003bd80:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003bd90:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003bda0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003bdb0:·6469·6174·696f·6e20·4 | 0003bdb0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003bdc0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bdd0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bde0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bdf0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003be00:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003be10:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003be20:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003be30:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003be40:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003bdc0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003bdd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bde0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bdf0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003be00:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003be10:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003be20:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003be30:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003be40:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003be50:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003be60:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003be70:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003be80:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003be90:·7267·6574·3d22·2369·646d·3830·3033·2220··rget="#idm8003"· | |||
| 0003bea0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003beb0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bec0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bed0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bee0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bef0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bf00:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003bf10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bf20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bf30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bf40:·6522·2069·643d·2269·646d·3830·3033·223e··e"·id="idm8003"> | |||
| 0003bf50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bf60:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bf70:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bf80:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bf90:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003bfa0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003bfb0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003bfc0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b | 0003bfd0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003bfe0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003bff0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c000:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c010:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c020:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c030:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c040:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003c050:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003c060:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c070:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c080:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c090:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c0a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c0b0:·646d·3830·3034·2220·7461·6269·6e64·6578··dm8004"·tabindex | |||
| 0003c0c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c0d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c0e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c0f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c100:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c110:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003c120:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c130:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c140:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c150:·2069·643d·2269·646d·3830·3034·223e·3c74···id="idm8004"><t | |||
| 0003c160:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c170:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c180:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c190:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c1a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003 | 0003c1b0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003 | 0003c1c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bea0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003beb0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003 | 0003c1d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003c1e0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003c1f0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003 | 0003c200:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003bee0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bef0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bf00:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bf10:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bf20:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bf30:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bf40:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bf50:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003bf60:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003bf70:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003bf80:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003bf90:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003bfa0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003bfb0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003bfc0:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003bfd0:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003bfe0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003bff0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c000:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c010:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c020:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c030:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c040:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| Max diff block lines reached; 3137606/3169814 bytes (98.98%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 86 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 87 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 88 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 147, 14 lines modified | Offset 147, 33 lines modified | ||
| 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 148 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 149 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 150 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 151 | ············_\x8c_\x8i_\x8s············5.3.1 | 151 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 152 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 153 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | package·--add=aide | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | -·name:·Ensure·aide·is·installed | 175 | -·name:·Ensure·aide·is·installed |
| 160 | ··package: | 176 | ··package: |
| Offset 169, 38 lines modified | Offset 188, 14 lines modified | ||
| 169 | ··-·PCI-DSSv4-11.5.2 | 188 | ··-·PCI-DSSv4-11.5.2 |
| 170 | ··-·enable_strategy | 189 | ··-·enable_strategy |
| 171 | ··-·low_complexity | 190 | ··-·low_complexity |
| 172 | ··-·low_disruption | 191 | ··-·low_disruption |
| 173 | ··-·medium_severity | 192 | ··-·medium_severity |
| 174 | ··-·no_reboot_needed | 193 | ··-·no_reboot_needed |
| 175 | ··-·package_aide_installed | 194 | ··-·package_aide_installed |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | include·install_aide | ||
| 182 | class·install_aide·{ | ||
| 183 | ··package·{·'aide': | ||
| 184 | ····ensure·=>·'installed', | ||
| 185 | ··} | ||
| 186 | } | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | [[packages]] | ||
| 189 | name·=·"aide" | ||
| 190 | version·=·"*" | ||
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 196 | package·install·aide | ||
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | #·Remediation·is·applicable·only·in·certain·platforms | 200 | #·Remediation·is·applicable·only·in·certain·platforms |
| 203 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 201 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 208, 21 lines modified | Offset 203, 26 lines modified | ||
| 208 | if·!·rpm·-q·--quiet·"aide"·;·then | 203 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 209 | ····yum·install·-y·"aide" | 204 | ····yum·install·-y·"aide" |
| 210 | fi | 205 | fi |
| 211 | else | 206 | else |
| 212 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 207 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 213 | fi | 208 | fi |
| 214 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 215 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 216 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 217 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 218 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 214 | include·install_aide | ||
| 219 | 215 | class·install_aide·{ | |
| 216 | ··package·{·'aide': | ||
| 217 | ····ensure·=>·'installed', | ||
| 218 | ··} | ||
| 219 | } | ||
| 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 220 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 221 | Run·the·following·command·to·generate·a·new·database: | 221 | Run·the·following·command·to·generate·a·new·database: |
| 222 | $·sudo·/usr/sbin/aide·--init | 222 | $·sudo·/usr/sbin/aide·--init |
| 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 223 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 224 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 225 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 226 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 405, 47 lines modified | Offset 405, 47 lines modified | ||
| 405 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 405 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 406 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 406 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 408 | [[customizations.filesystem]] | 408 | [[customizations.filesystem]] |
| 409 | mountpoint·=·"/home" | 409 | mountpoint·=·"/home" |
| 410 | size·=·1073741824 | 410 | size·=·1073741824 |
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 412 | logvol·/home·1024 | ||
| 413 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 192707/198185 bytes (97.24%) of diff not shown. | |||
| Offset 14564, 16 lines modified | Offset 14564, 16 lines modified | ||
| 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038e30:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038e40:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038e50:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038e60:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038e70:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038e80:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038e90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038ea0:·2020·2020·2028·6173·206f·6620·3230·323 | 00038ea0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038eb0:·2d30·3 | 00038eb0:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038ec0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038ed0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038ee0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038ef0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038f00:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038f10:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038f20:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 14984, 217 lines modified | Offset 14984, 217 lines modified | ||
| 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | 0003a870:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | ||
| 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | 0003a880:·3231·3822·2074·6162·696e·6465·783d·2230··218"·tabindex="0 | ||
| 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003a890:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003a8a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003a8b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003a8c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003a8d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a8e0:·6961·7469·6f6e·204 | 0003a8e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003a8f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003a900:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003a910:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003a920:·6c61·7073·6522·2069·643d·2269·646d·3133··lapse"·id="idm13 | |||
| 0003a930:·3231·3822·3e3c·7461·626c·6520·636c·6173··218"><table·clas | |||
| 0003a940:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003a950:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003a960:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003a970:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003a980:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003a990:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003a9a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003a9b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003a9c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a | 0003a8f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003a900:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a910:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a920:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a930:·2069·643d·2269·646d·3133·3231·3822·3e3c···id="idm13218">< | |||
| 0003a940:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003a950:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003a960:·646e·662d·6175·746f·6d61·7469·6322·0a76··dnf-automatic".v | |||
| 0003a970:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003a980:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003a990:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003a9a0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003a9b0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003a9c0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003a9d0:·6964·6d31·3332·3139·2220·7461·6269·6e64··idm13219"·tabind | |||
| 0003a9e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003a9f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003aa00:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003aa10:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003aa20:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003aa30:·5265·6d65·6469·6174·696f·6e20·416e·6163··Remediation·Anac | |||
| 0003aa40:·6f6e·6461·2073·6e69·7070·6574·20e2·87b2··onda·snippet·... | |||
| 0003aa50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aa60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aa70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aa80:·2269·646d·3133·3231·3922·3e3c·7461·626c··"idm13219"><tabl | |||
| 0003aa90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aaa0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aab0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003aac0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003aad0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003aae0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003aaf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ab00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ab10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ab20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ab30:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ab40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ab50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003a | 0003ab60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ab70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ab80:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003a9f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003aa00:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003aa10:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003aa20:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003aa30:·616d·653a·2045·6e73·7572·6520·646e·662d··ame:·Ensure·dnf- | |||
| 0003aa40:·6175·746f·6d61·7469·6320·6973·2069·6e73··automatic·is·ins | |||
| 0003aa50:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003aa60:·3a0a·2020·2020·6e61·6d65·3a20·646e·662d··:.····name:·dnf- | |||
| 0003aa70:·6175·746f·6d61·7469·630a·2020·2020·7374··automatic.····st | |||
| 0003aa80:·6174·653a·2070·7265·7365·6e74·0a20·2074··ate:·present.··t | |||
| 0003aa90:·6167·733a·0a20·202d·2065·6e61·626c·655f··ags:.··-·enable_ | |||
| 0003aaa0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003aab0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003aac0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003aad0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003aae0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003aaf0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003ab | 0003ab90:·643d·646e·662d·6175·746f·6d61·7469·630a··d=dnf-automatic. | ||
| 0003ab10:·635f·696e·7374·616c·6c65·640a·3c2f·636f··c_installed.</co | |||
| 0003ab | 0003aba0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003ab | 0003abb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003ab | 0003abc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003ab | 0003abd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003ab | 0003abe0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ab | 0003abf0:·3d22·2369·646d·3133·3232·3022·2074·6162··="#idm13220"·tab | ||
| 0003a | 0003ac00:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a | 0003ac10:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a | 0003ac20:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a | 0003ac30:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a | 0003ac40:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a | 0003ac50:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | ||
| 0003ac60:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003ac70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003ac80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003ac90:·6170·7365·2220·6964·3d22·6964·6d31·3332··apse"·id="idm132 | |||
| 0003aca0:·3230·223e·3c74·6162·6c65·2063·6c61·7373··20"><table·class | |||
| 0003acb0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003acc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003acd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003ace0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003acf0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ad00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ad10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003ad20:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003ad30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003ad40:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| Max diff block lines reached; 369790/399652 bytes (92.53%) of diff not shown. | |||
| Offset 74, 15 lines modified | Offset 74, 15 lines modified | ||
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 78 | ····*·cpe:/o:centos:centos:8 | 78 | ····*·cpe:/o:centos:centos:8 |
| 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 80 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 81 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 83 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 84 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 85 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 86 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 87 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 88 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | $·sudo·yum·install·dnf-automatic | 111 | $·sudo·yum·install·dnf-automatic |
| 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 112 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 113 | ············suitable·for·automatic,·regular·execution. | 113 | ············suitable·for·automatic,·regular·execution. |
| 114 | Severity: ··medium | 114 | Severity: ··medium |
| 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 115 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 116 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=dnf-automatic | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·install·dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·dnf-automatic·is·installed | 139 | -·name:·Ensure·dnf-automatic·is·installed |
| 124 | ··package: | 140 | ··package: |
| Offset 127, 54 lines modified | Offset 146, 35 lines modified | ||
| 127 | ··tags: | 146 | ··tags: |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_dnf-automatic_installed | 152 | ··-·package_dnf-automatic_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_dnf-automatic | ||
| 140 | class·install_dnf-automatic·{ | ||
| 141 | ··package·{·'dnf-automatic': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"dnf-automatic" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·dnf-automatic | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 158 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 161 | ····yum·install·-y·"dnf-automatic" | 159 | ····yum·install·-y·"dnf-automatic" |
| 162 | fi | 160 | fi |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | include·install_dnf-automatic | ||
| 167 | class·install_dnf-automatic·{ | ||
| 168 | package· | 168 | ··package·{·'dnf-automatic': |
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 173 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 171 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 174 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 172 | automatic.conf. | 175 | automatic.conf. |
| 173 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 176 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 174 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 177 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 175 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 178 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9491, 14 lines modified | Offset 9491, 28 lines modified | ||
| 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9491 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9492 | ···························A.9.1.2 | 9492 | ···························A.9.1.2 |
| 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9493 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9494 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9495 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9496 | ············_\x8c_\x8i_\x8s············2.2.3 | 9496 | ············_\x8c_\x8i_\x8s············2.2.3 |
| 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9497 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9503 | package·--remove=dhcp-server | ||
| 9504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43125/48928 bytes (88.14%) of diff not shown. | |||
| Offset 14547, 16 lines modified | Offset 14547, 16 lines modified | ||
| 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00038d20:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00038d30:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038d40:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038d50:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038d60:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038d70:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038d80:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038d90:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038d90:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038da0:·303 | 00038da0:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038db0:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038dc0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038dd0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038de0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00038df0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00038e00:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00038e10:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15367, 235 lines modified | Offset 15367, 235 lines modified | ||
| 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003c060:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003c070:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003c080:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003c090:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003c0a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003c0b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003c0c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003c0d0:·6961·7469·6f6e·204 | 0003c0d0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003c0e0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003c0e0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c0f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c100:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c110:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c120:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003c130:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c140:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c150:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c160:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c170:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c180:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c190:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c1a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c1b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c1c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c1d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c1e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c1f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c200:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c210:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003c220:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003c230:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c240:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c250:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c260:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c270:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c280:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c290:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c2a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c2b0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c2c0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c2d0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c2e0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c2f0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c300:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c310:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c320:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c330:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003c340:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003c350:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003c360:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003c370:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003c380:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003c390:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003c3a0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003c3b0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003c3c0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c3d0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c3e0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c3f0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c410:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c470:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003c480:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003c490:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c4a0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c4b0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c4c0:·6964·6d38·3030·3322·3e3c·7461·626c·6520··idm8003"><table· | |||
| 0003c4d0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c4e0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c4f0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c500:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c510:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c520:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c530:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c540:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c550:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c560:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c570:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c580:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c590:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003c5a0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003c5b0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c5c0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003c5d0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003c5e0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003c5f0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003c600:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003c610:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003c620:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003c630:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c640:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c650:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c660:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c670:·7267·6574·3d22·2369·646d·3830·3034·2220··rget="#idm8004"· | |||
| 0003c680:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c690:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c6a0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c6b0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c6c0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c6d0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c6e0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003c6f0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003c700:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c710:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c720:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| Max diff block lines reached; 7710245/7742591 bytes (99.58%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Ensure·aide·is·installed | 166 | -·name:·Ensure·aide·is·installed |
| 151 | ··package: | 167 | ··package: |
| Offset 160, 38 lines modified | Offset 179, 14 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 181 | ··-·low_complexity |
| 163 | ··-·low_disruption | 182 | ··-·low_disruption |
| 164 | ··-·medium_severity | 183 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | 191 | #·Remediation·is·applicable·only·in·certain·platforms |
| 194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 199, 21 lines modified | Offset 194, 26 lines modified | ||
| 199 | if·!·rpm·-q·--quiet·"aide"·;·then | 194 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 200 | ····yum·install·-y·"aide" | 195 | ····yum·install·-y·"aide" |
| 201 | fi | 196 | fi |
| 202 | else | 197 | else |
| 203 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 204 | fi | 199 | fi |
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | include·install_aide | ||
| 210 | 206 | class·install_aide·{ | |
| 207 | ··package·{·'aide': | ||
| 208 | ····ensure·=>·'installed', | ||
| 209 | ··} | ||
| 210 | } | ||
| 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 211 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 212 | Run·the·following·command·to·generate·a·new·database: | 212 | Run·the·following·command·to·generate·a·new·database: |
| 213 | $·sudo·/usr/sbin/aide·--init | 213 | $·sudo·/usr/sbin/aide·--init |
| 214 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 214 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 215 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 215 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 216 | To·initiate·a·manual·check,·run·the·following·command: | 216 | To·initiate·a·manual·check,·run·the·following·command: |
| 217 | $·sudo·/usr/sbin/aide·--check | 217 | $·sudo·/usr/sbin/aide·--check |
| Offset 677, 39 lines modified | Offset 677, 14 lines modified | ||
| 677 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 677 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 678 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 678 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 679 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 679 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 680 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 680 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 681 | ············_\x8c_\x8i_\x8s······1.6.1 | 681 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 682 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 682 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 683 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 683 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 685 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 686 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 687 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 485512/492017 bytes (98.68%) of diff not shown. | |||
| Offset 14548, 15 lines modified | Offset 14548, 15 lines modified | ||
| 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038d30:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038d40:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038d50:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038d60:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038d70:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038d80:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038d90:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038da0:·7320·6f66·2032·3032·3 | 00038da0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038db0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038dc0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038dd0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038de0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038df0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038e00:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038e10:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15336, 235 lines modified | Offset 15336, 235 lines modified | ||
| 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | 0003be70:·7267·6574·3d22·2369·646d·3830·3032·2220··rget="#idm8002"· | ||
| 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003be80:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003be90:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bea0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003beb0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bec0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bed0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bee0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bef0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bee0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bef0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bf00:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bf10:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bf20:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003bf30:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bf40:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bf50:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bf60:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bf70:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003bf80:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003bf90:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bfa0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003bfb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bfc0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003bfd0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003bfe0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003bff0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c000:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c010:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c020:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003c030:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003c040:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003c050:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003c060:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003c070:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003c080:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003c090:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003c0a0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003c0b0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003c0c0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003c0d0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003c0e0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003c0f0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003c100:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003c110:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003c120:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003c130:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 0003c140:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 0003c150:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 0003c160:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 0003c170:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 0003c180:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 0003c190:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 0003c1a0:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 0003c1b0:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 0003c1c0:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 0003c1d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003c1e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003c1f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003c200:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003c210:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003c220:·3830·3033·2220·7461·6269·6e64·6578·3d22··8003"·tabindex=" | |||
| 0003c230:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003c240:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003c250:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003c260:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003c270:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003c280:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0003c290:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c2a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c2b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c2c0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003c2d0:·3033·223e·3c74·6162·6c65·2063·6c61·7373··03"><table·class | |||
| 0003c2e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003c2f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003c300:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003c310:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003c320:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003c330:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c340:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003c350:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003c360:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c370:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003c380:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003c390:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003c3a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003c3b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003c3c0:·3e3c·7072·653e·3c63·6f64·653e·696e·636c··><pre><code>incl | |||
| 0003c3d0:·7564·6520·696e·7374·616c·6c5f·6169·6465··ude·install_aide | |||
| 0003c3e0:·0a0a·636c·6173·7320·696e·7374·616c·6c5f··..class·install_ | |||
| 0003c3f0:·6169·6465·207b·0a20·2070·6163·6b61·6765··aide·{.··package | |||
| 0003c400:·207b·2027·6169·6465·273a·0a20·2020·2065···{·'aide':.····e | |||
| 0003c410:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 0003c420:·7461·6c6c·6564·272c·0a20·207d·0a7d·0a3c··talled',.··}.}.< | |||
| 0003c430:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c440:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c450:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c460:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c470:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c480:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 0003c490:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c4a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c4b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c4c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c4d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c4e0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | |||
| 0003c4f0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0003c500:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003c510:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003c520:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003c530:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| Max diff block lines reached; 4179970/4212178 bytes (99.24%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 82 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 83 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 84 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 14 lines modified | Offset 133, 33 lines modified | ||
| 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 133 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 136 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 137 | ············_\x8c_\x8i_\x8s············5.3.1 | 137 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 139 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·--add=aide | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 145 | -·name:·Ensure·aide·is·installed | 161 | -·name:·Ensure·aide·is·installed |
| 146 | ··package: | 162 | ··package: |
| Offset 155, 38 lines modified | Offset 174, 14 lines modified | ||
| 155 | ··-·PCI-DSSv4-11.5.2 | 174 | ··-·PCI-DSSv4-11.5.2 |
| 156 | ··-·enable_strategy | 175 | ··-·enable_strategy |
| 157 | ··-·low_complexity | 176 | ··-·low_complexity |
| 158 | ··-·low_disruption | 177 | ··-·low_disruption |
| 159 | ··-·medium_severity | 178 | ··-·medium_severity |
| 160 | ··-·no_reboot_needed | 179 | ··-·no_reboot_needed |
| 161 | ··-·package_aide_installed | 180 | ··-·package_aide_installed |
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | include·install_aide | ||
| 168 | class·install_aide·{ | ||
| 169 | ··package·{·'aide': | ||
| 170 | ····ensure·=>·'installed', | ||
| 171 | ··} | ||
| 172 | } | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 174 | [[packages]] | ||
| 175 | name·=·"aide" | ||
| 176 | version·=·"*" | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 182 | package·install·aide | ||
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | #·Remediation·is·applicable·only·in·certain·platforms | 186 | #·Remediation·is·applicable·only·in·certain·platforms |
| 189 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 187 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 194, 21 lines modified | Offset 189, 26 lines modified | ||
| 194 | if·!·rpm·-q·--quiet·"aide"·;·then | 189 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 195 | ····yum·install·-y·"aide" | 190 | ····yum·install·-y·"aide" |
| 196 | fi | 191 | fi |
| 197 | else | 192 | else |
| 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 193 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 199 | fi | 194 | fi |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 195 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 196 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 197 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 198 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 199 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 200 | include·install_aide | ||
| 205 | 201 | class·install_aide·{ | |
| 202 | ··package·{·'aide': | ||
| 203 | ····ensure·=>·'installed', | ||
| 204 | ··} | ||
| 205 | } | ||
| 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 206 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 207 | Run·the·following·command·to·generate·a·new·database: | 207 | Run·the·following·command·to·generate·a·new·database: |
| 208 | $·sudo·/usr/sbin/aide·--init | 208 | $·sudo·/usr/sbin/aide·--init |
| 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 209 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 210 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 211 | To·initiate·a·manual·check,·run·the·following·command: | 211 | To·initiate·a·manual·check,·run·the·following·command: |
| 212 | $·sudo·/usr/sbin/aide·--check | 212 | $·sudo·/usr/sbin/aide·--check |
| Offset 672, 39 lines modified | Offset 672, 14 lines modified | ||
| 672 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 672 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 673 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 673 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 674 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 674 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 675 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 675 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 676 | ············_\x8c_\x8i_\x8s······1.6.1 | 676 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 677 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 677 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 678 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 678 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 329731/336236 bytes (98.07%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00038dc0:·2d32·3 | 00038dc0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15327, 235 lines modified | Offset 15327, 235 lines modified | ||
| 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003bde0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | 0003bdf0:·3830·3032·2220·7461·6269·6e64·6578·3d22··8002"·tabindex=" | ||
| 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003be00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003be10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003be20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003be30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003be40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003be50:·6469·6174·696f·6e20·4 | 0003be50:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003be60:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003be70:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003be80:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003be90:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003bea0:·3030·3222·3e3c·7461·626c·6520·636c·6173··002"><table·clas | |||
| 0003beb0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bec0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bed0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bee0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003be | 0003be60:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003be70:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003be80:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003be90:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bea0:·2220·6964·3d22·6964·6d38·3030·3222·3e3c··"·id="idm8002">< | |||
| 0003beb0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003bec0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003bed0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003bee0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003bef0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bf00:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bf10:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bf20:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bf30:·7267·6574·3d22·2369·646d·3830·3033·2220··rget="#idm8003"· | |||
| 0003bf40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bf50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bf60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bf70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bf80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bf90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bfa0:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003bfb0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bfc0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bfd0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bfe0:·6522·2069·643d·2269·646d·3830·3033·223e··e"·id="idm8003"> | |||
| 0003bff0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c000:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c010:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c020:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c030:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003c040:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003c050:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c060:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003 | 0003c070:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003c080:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003c090:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c0a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c0b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c0c0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c0d0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c0e0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003c0f0:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003c100:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c110:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c120:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c130:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c140:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c150:·646d·3830·3034·2220·7461·6269·6e64·6578··dm8004"·tabindex | |||
| 0003c160:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c170:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c180:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c190:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c1a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c1b0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003c1c0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c1d0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c1e0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c1f0:·2069·643d·2269·646d·3830·3034·223e·3c74···id="idm8004"><t | |||
| 0003c200:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003c210:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c220:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c230:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c240:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003 | 0003c250:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003 | 0003c260:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003bf40:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003bf50:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bf60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bf70:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bf80:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bf90:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003bfa0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003bfb0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003bfc0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003bfd0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003bfe0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003bff0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003c000:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003c010:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003c020:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003c030:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003c040:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003c050:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003c060:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003c070:·2d52·4845·4c2d·3038·2d30·3130·3335·390a··-RHEL-08-010359. | |||
| 0003c080:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003c090:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003c0a0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003c0b0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003c0c0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003c0d0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003c0e0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003c0f0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| Max diff block lines reached; 3912928/3945274 bytes (99.18%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 132, 14 lines modified | Offset 132, 33 lines modified | ||
| 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 133 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 134 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 135 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 136 | ············_\x8c_\x8i_\x8s············5.3.1 | 136 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"aide" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·--add=aide | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | -·name:·Ensure·aide·is·installed | 160 | -·name:·Ensure·aide·is·installed |
| 145 | ··package: | 161 | ··package: |
| Offset 154, 38 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 188, 26 lines modified | ||
| 193 | if·!·rpm·-q·--quiet·"aide"·;·then | 188 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 194 | ····yum·install·-y·"aide" | 189 | ····yum·install·-y·"aide" |
| 195 | fi | 190 | fi |
| 196 | else | 191 | else |
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 198 | fi | 193 | fi |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | include·install_aide | ||
| 204 | 200 | class·install_aide·{ | |
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 209 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 210 | To·initiate·a·manual·check,·run·the·following·command: | 210 | To·initiate·a·manual·check,·run·the·following·command: |
| 211 | $·sudo·/usr/sbin/aide·--check | 211 | $·sudo·/usr/sbin/aide·--check |
| Offset 671, 39 lines modified | Offset 671, 14 lines modified | ||
| 671 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 671 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 672 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 672 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 673 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 673 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 675 | ············_\x8c_\x8i_\x8s······1.6.1 | 675 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 676 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 676 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 303320/309825 bytes (97.90%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038d40:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038d50:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038d60:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038d70:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038d80:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038d90:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2020·2861·7320·6f66·2032·3032·3 | 00038db0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00038dc0:·2d32·3 | 00038dc0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038dd0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038de0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038df0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038e00:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038e10:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038e20:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038e30:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15359, 235 lines modified | Offset 15359, 235 lines modified | ||
| 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003bfe0:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003bff0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c000:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c010:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c020:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c030:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c040:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c050:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c0 | 0003c050:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003c060:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c070:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c080:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c090:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c0a0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c0b0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003c0c0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c0d0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c0e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c0 | 0003c0f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c0b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c0c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c0d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c | 0003c100:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c110:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c120:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c130:·6964·6d38·3030·3322·2074·6162·696e·6465··idm8003"·tabinde | |||
| 0003c140:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c150:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c160:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c170:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c180:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c190:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003c1a0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003c1b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c1c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c1d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c1e0:·6964·6d38·3030·3322·3e3c·7461·626c·6520··idm8003"><table· | |||
| 0003c1f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c200:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c210:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c220:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c230:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c240:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c250:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c260:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c270:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c280:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c290:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c2a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c | 0003c2b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003c100:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c | 0003c2c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003c2d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c2e0:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003c2f0:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003c300:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c310:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c320:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c330:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c340:·6172·6765·743d·2223·6964·6d38·3030·3422··arget="#idm8004" | |||
| 0003c350:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c360:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c370:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c380:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c390:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c3a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c3b0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003c3c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c3d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c3e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c3f0:·6d38·3030·3422·3e3c·7461·626c·6520·636c··m8004"><table·cl | |||
| 0003c400:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c410:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c420:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c430:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c440:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c | 0003c450:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003c130:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c | 0003c460:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003c470:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c | 0003c480:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c160:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c170:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c180:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c190:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c1a0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c1b0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c1c0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c1d0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c1e0:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c1f0:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c200:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c210:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c220:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c230:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c240:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c250:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c260:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c270:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c280:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c290:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c2a0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c2b0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c2c0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c2d0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c2e0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c2f0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| Max diff block lines reached; 7564052/7596398 bytes (99.57%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 137, 14 lines modified | Offset 137, 33 lines modified | ||
| 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 137 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 138 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 139 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 140 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 141 | ············_\x8c_\x8i_\x8s············5.3.1 | 141 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 142 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 143 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·--add=aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·install·aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | -·name:·Ensure·aide·is·installed | 165 | -·name:·Ensure·aide·is·installed |
| 150 | ··package: | 166 | ··package: |
| Offset 159, 38 lines modified | Offset 178, 14 lines modified | ||
| 159 | ··-·PCI-DSSv4-11.5.2 | 178 | ··-·PCI-DSSv4-11.5.2 |
| 160 | ··-·enable_strategy | 179 | ··-·enable_strategy |
| 161 | ··-·low_complexity | 180 | ··-·low_complexity |
| 162 | ··-·low_disruption | 181 | ··-·low_disruption |
| 163 | ··-·medium_severity | 182 | ··-·medium_severity |
| 164 | ··-·no_reboot_needed | 183 | ··-·no_reboot_needed |
| 165 | ··-·package_aide_installed | 184 | ··-·package_aide_installed |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | include·install_aide | ||
| 172 | class·install_aide·{ | ||
| 173 | ··package·{·'aide': | ||
| 174 | ····ensure·=>·'installed', | ||
| 175 | ··} | ||
| 176 | } | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 178 | [[packages]] | ||
| 179 | name·=·"aide" | ||
| 180 | version·=·"*" | ||
| 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 186 | package·install·aide | ||
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | #·Remediation·is·applicable·only·in·certain·platforms | 190 | #·Remediation·is·applicable·only·in·certain·platforms |
| 193 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 198, 21 lines modified | Offset 193, 26 lines modified | ||
| 198 | if·!·rpm·-q·--quiet·"aide"·;·then | 193 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 199 | ····yum·install·-y·"aide" | 194 | ····yum·install·-y·"aide" |
| 200 | fi | 195 | fi |
| 201 | else | 196 | else |
| 202 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 203 | fi | 198 | fi |
| 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 204 | include·install_aide | ||
| 209 | 205 | class·install_aide·{ | |
| 206 | ··package·{·'aide': | ||
| 207 | ····ensure·=>·'installed', | ||
| 208 | ··} | ||
| 209 | } | ||
| 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 210 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 211 | Run·the·following·command·to·generate·a·new·database: | 211 | Run·the·following·command·to·generate·a·new·database: |
| 212 | $·sudo·/usr/sbin/aide·--init | 212 | $·sudo·/usr/sbin/aide·--init |
| 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 214 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 215 | To·initiate·a·manual·check,·run·the·following·command: | 215 | To·initiate·a·manual·check,·run·the·following·command: |
| 216 | $·sudo·/usr/sbin/aide·--check | 216 | $·sudo·/usr/sbin/aide·--check |
| Offset 676, 39 lines modified | Offset 676, 14 lines modified | ||
| 676 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 676 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 677 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 677 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 678 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 678 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 679 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 679 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 680 | ············_\x8c_\x8i_\x8s······1.6.1 | 680 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 681 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 681 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 682 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 682 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 683 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 684 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 685 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 686 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 468841/475346 bytes (98.63%) of diff not shown. | |||
| Offset 14583, 15 lines modified | Offset 14583, 15 lines modified | ||
| 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038f60:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038f70:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038f80:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038f90:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038fa0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038fb0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038fc0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038fd0:·3 | 00038fd0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038fe0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038ff0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039000:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039010:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039020:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039030:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00039040:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | 0003bfd0:·6172·6765·743d·2223·6964·6d38·3030·3222··arget="#idm8002" | ||
| 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bfe0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bff0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003c000:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003c010:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003c020:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003c030:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003c040:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003c050:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003c060:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003c070:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003c080:·6522·2069·643d·2269·646d·3830·3032·223e··e"·id="idm8002"> | |||
| 0003c090:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003c0a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003c0b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003c0c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003c0 | 0003c040:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003c050:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003c060:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c070:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c080:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c090:·2269·646d·3830·3032·223e·3c70·7265·3e3c··"idm8002"><pre>< | |||
| 0003c0a0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003c0b0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003c0c0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003c0d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c0e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c0f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c100:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c110:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c120:·2223·6964·6d38·3030·3322·2074·6162·696e··"#idm8003"·tabin | |||
| 0003c130:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c140:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c150:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c160:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c170:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c180:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003c190:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003c1a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003c1b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003c1c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003c1d0:·3d22·6964·6d38·3030·3322·3e3c·7461·626c··="idm8003"><tabl | |||
| 0003c1e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003c1f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003c200:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003c210:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003c220:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003c230:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003c240:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003c250:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003c260:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003c270:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003c280:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003c290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003c | 0003c2a0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003c0f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003c | 0003c2b0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003c2c0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003c2d0:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003c2e0:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003c2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003c300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003c310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003c320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003c330:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 0003c340:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003c350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003c360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c3a0:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003c3b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c3c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c3d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c3e0:·6964·6d38·3030·3422·3e3c·7461·626c·6520··idm8004"><table· | |||
| 0003c3f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c400:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c410:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c420:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c430:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c | 0003c440:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003c | 0003c450:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003c130:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003c140:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003c150:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003c160:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003c170:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003c180:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003c190:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003c1a0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003c1b0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003c1c0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003c1d0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003c1e0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003c1f0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003c200:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003c210:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003c220:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003c230:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003c240:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003c250:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003c260:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003c270:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003c280:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003c290:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003c2a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003c2b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003c2c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003c2d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003c2e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| Max diff block lines reached; 6024662/6056870 bytes (99.47%) of diff not shown. | |||
| Offset 79, 15 lines modified | Offset 79, 15 lines modified | ||
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 82 | ····*·cpe:/o:redhat:enterprise_linux:8 | 82 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 83 | ····*·cpe:/o:centos:centos:8 | 83 | ····*·cpe:/o:centos:centos:8 |
| 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 84 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 85 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 86 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 87 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 89 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 90 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 91 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 92 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 93 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 138, 14 lines modified | Offset 138, 33 lines modified | ||
| 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 138 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 140 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 141 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 142 | ············_\x8c_\x8i_\x8s············5.3.1 | 142 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 143 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 144 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·--add=aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | -·name:·Ensure·aide·is·installed | 166 | -·name:·Ensure·aide·is·installed |
| 151 | ··package: | 167 | ··package: |
| Offset 160, 38 lines modified | Offset 179, 14 lines modified | ||
| 160 | ··-·PCI-DSSv4-11.5.2 | 179 | ··-·PCI-DSSv4-11.5.2 |
| 161 | ··-·enable_strategy | 180 | ··-·enable_strategy |
| 162 | ··-·low_complexity | 181 | ··-·low_complexity |
| 163 | ··-·low_disruption | 182 | ··-·low_disruption |
| 164 | ··-·medium_severity | 183 | ··-·medium_severity |
| 165 | ··-·no_reboot_needed | 184 | ··-·no_reboot_needed |
| 166 | ··-·package_aide_installed | 185 | ··-·package_aide_installed |
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | include·install_aide | ||
| 173 | class·install_aide·{ | ||
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 179 | [[packages]] | ||
| 180 | name·=·"aide" | ||
| 181 | version·=·"*" | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 187 | package·install·aide | ||
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | #·Remediation·is·applicable·only·in·certain·platforms | 191 | #·Remediation·is·applicable·only·in·certain·platforms |
| 194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 192 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 199, 21 lines modified | Offset 194, 26 lines modified | ||
| 199 | if·!·rpm·-q·--quiet·"aide"·;·then | 194 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 200 | ····yum·install·-y·"aide" | 195 | ····yum·install·-y·"aide" |
| 201 | fi | 196 | fi |
| 202 | else | 197 | else |
| 203 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 198 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 204 | fi | 199 | fi |
| 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 205 | include·install_aide | ||
| 210 | 206 | class·install_aide·{ | |
| 207 | ··package·{·'aide': | ||
| 208 | ····ensure·=>·'installed', | ||
| 209 | ··} | ||
| 210 | } | ||
| 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 211 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 212 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 213 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 214 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 215 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 330, 14 lines modified | Offset 330, 18 lines modified | ||
| 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 330 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 331 | ············_\x8i_\x8s_\x8m······1446 | 331 | ············_\x8i_\x8s_\x8m······1446 |
| 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 332 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 333 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 334 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 335 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 336 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 338 | [customizations] | ||
| 339 | fips·=·true | ||
| Max diff block lines reached; 517406/523674 bytes (98.80%) of diff not shown. | |||
| Offset 14549, 16 lines modified | Offset 14549, 16 lines modified | ||
| 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038d40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038d50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038d60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038d70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038d80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038d90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038da0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038db0:·2028·6173·206f·6620·3230·323 | 00038db0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00038dc0:·323 | 00038dc0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038dd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038de0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038df0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038e00:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038e10:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038e20:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038e30:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17421, 243 lines modified | Offset 17421, 243 lines modified | ||
| 000440c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 000440c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 000440d0:·3d22·2369·646d·3837·3536·2220·7461·6269··="#idm8756"·tabi | 000440d0:·3d22·2369·646d·3837·3536·2220·7461·6269··="#idm8756"·tabi | ||
| 000440e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 000440e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 000440f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 000440f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00044100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00044100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00044110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00044110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00044120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00044120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00044130:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00044130:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 00044140:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00044150:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00044160:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00044170:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00044180:·3d22·6964·6d38·3735·3622·3e3c·7461·626c··="idm8756"><tabl | |||
| 00044190:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000441a0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000441b0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000441c0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 000441d0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00044140:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00044150:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00044160:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00044170:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00044180:·2069·643d·2269·646d·3837·3536·223e·3c74···id="idm8756"><t | |||
| 00044190:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 000441a0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 000441b0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 000441c0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000441d0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000441e0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000441f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00044200:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00044 | 000441e0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 00044220:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00044 | 000441f0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 00044200:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00044210:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00044220:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00044230:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00044240:· | 00044240:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 00044250:· | 00044250:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 00044260:· | 00044260:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 00044270:· | 00044270:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 00044280:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 00044290:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 000442a0:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 000442b0:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 000442c0:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 000442d0:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 000442e0:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 000442f0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 00044300:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 00044310:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 00044320:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 00044330:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 00044340:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 00044350:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00044360:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 00044370:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 00044380:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 00044390:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 000443a0:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 000443b0:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 000443c0:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 000443d0:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 000443e0:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 000443f0:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 00044400:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00044410:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 00044420:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 00044430:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 00044440:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 00044450:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 00044460:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 00044470:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 00044480:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 00044490:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000444a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000444b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 000444c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 000444d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 000444e0:·2369·646d·3837·3537·2220·7461·6269·6e64··#idm8757"·tabind | |||
| 000444f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00044500:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00044510:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00044520:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00044530:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00044540:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00044550:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00044560:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00044570:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00044580:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00044590:·6964·6d38·3735·3722·3e3c·7461·626c·6520··idm8757"><table· | |||
| 000445a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000445b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000445c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000445d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000445e0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 000445f0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00044600:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00044610:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00044620:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00044630:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00044640:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00044650:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00044660:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00044670:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00044680:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00044 | 00044280:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | ||
| 00044 | 00044290:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 00044 | 000442a0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| Max diff block lines reached; 2866922/2900372 bytes (98.85%) of diff not shown. | |||
| Offset 70, 15 lines modified | Offset 70, 15 lines modified | ||
| 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 70 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 74 | ····*·cpe:/o:centos:centos:8 | 74 | ····*·cpe:/o:centos:centos:8 |
| 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 76 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 77 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 80 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 81 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 82 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 83 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 84 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 584, 39 lines modified | Offset 584, 14 lines modified | ||
| 584 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 584 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 585 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 585 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 586 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 586 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 587 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 587 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 588 | ············_\x8c_\x8i_\x8s······1.6.1 | 588 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 589 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 589 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 590 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 590 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 596 | --- | ||
| 597 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 598 | kind:·MachineConfig | ||
| 599 | spec: | ||
| 600 | ··config: | ||
| 601 | ····ignition: | ||
| 602 | ······version:·3.1.0 | ||
| 603 | ····systemd: | ||
| 604 | ······units: | ||
| 605 | ········-·name:·configure-crypto-policy.service | ||
| 606 | ··········enabled:·true | ||
| 607 | ··········contents:·| | ||
| 608 | ············[Unit] | ||
| 609 | ············Before=kubelet.service | ||
| 610 | ············[Service] | ||
| 611 | ············Type=oneshot | ||
| 612 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 613 | ············RemainAfterExit=yes | ||
| 614 | ············[Install] | ||
| 615 | ············WantedBy=multi-user.target | ||
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 617 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 618 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 619 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 620 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 621 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 596 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 622 | ··set_fact: | 597 | ··set_fact: |
| Offset 680, 14 lines modified | Offset 655, 39 lines modified | ||
| 680 | » echo·"to·see·what·package·to·(re)install"·>&2 | 655 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 681 | » false··#·end·with·an·error·code | 656 | » false··#·end·with·an·error·code |
| 682 | elif·test·"$rc"·!=·0;·then | 657 | elif·test·"$rc"·!=·0;·then |
| 683 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 658 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 684 | » false··#·end·with·an·error·code | 659 | » false··#·end·with·an·error·code |
| 685 | fi | 660 | fi |
| 661 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 662 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 663 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 664 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 665 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 666 | --- | ||
| 667 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 668 | kind:·MachineConfig | ||
| 669 | spec: | ||
| 670 | ··config: | ||
| 671 | ····ignition: | ||
| 672 | ······version:·3.1.0 | ||
| 673 | ····systemd: | ||
| 674 | ······units: | ||
| 675 | ········-·name:·configure-crypto-policy.service | ||
| 676 | ··········enabled:·true | ||
| 677 | ··········contents:·| | ||
| 678 | ············[Unit] | ||
| 679 | ············Before=kubelet.service | ||
| 680 | ············[Service] | ||
| 681 | ············Type=oneshot | ||
| 682 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 683 | ············RemainAfterExit=yes | ||
| 684 | ············[Install] | ||
| 685 | ············WantedBy=multi-user.target | ||
| 686 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 686 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 687 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 687 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 688 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 688 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 689 | Severity: ··medium | 689 | Severity: ··medium |
| 690 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 690 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 692 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 692 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1021, 14 lines modified | Offset 1021, 33 lines modified | ||
| 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1021 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1022 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1023 | The·rear·package·can·be·installed·with·the·following·command: | 1023 | The·rear·package·can·be·installed·with·the·following·command: |
| 1024 | $·sudo·yum·install·rear | 1024 | $·sudo·yum·install·rear |
| 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1025 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1026 | Severity: ·medium | 1026 | Severity: ·medium |
| 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1027 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1029 | [[packages]] | ||
| 1030 | name·=·"rear" | ||
| 1031 | version·=·"*" | ||
| 1032 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1033 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1034 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1035 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1036 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1037 | package·--add=rear | ||
| 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1043 | package·install·rear | ||
| 1028 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1029 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1030 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1031 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1032 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 186248/192483 bytes (96.76%) of diff not shown. | |||
| Offset 14569, 15 lines modified | Offset 14569, 15 lines modified | ||
| 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038ef0:·206f·6620·3230·323 | 00038ef0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16835, 242 lines modified | Offset 16835, 242 lines modified | ||
| 00041c20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 00041c20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 00041c30:·3735·3622·2074·6162·696e·6465·783d·2230··756"·tabindex="0 | 00041c30:·3735·3622·2074·6162·696e·6465·783d·2230··756"·tabindex="0 | ||
| 00041c40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00041c40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00041c50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00041c50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00041c60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00041c60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00041c70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00041c70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00041c80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00041c80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00041c90:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 00041ca0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00041cb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00041cc0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00041cd0:·6c61·7073·6522·2069·643d·2269·646d·3837··lapse"·id="idm87 | |||
| 00041ce0:·3536·223e·3c74·6162·6c65·2063·6c61·7373··56"><table·class | |||
| 00041cf0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041c90:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 00041ca0:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 00041cb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041cc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041cd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041ce0:·6d38·3735·3622·3e3c·7461·626c·6520·636c··m8756"><table·cl | |||
| 00041cf0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041d00:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041d | 00041d00:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 00041d10:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041d20:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041d30:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041d20:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041d30:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041d40:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041d50:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00041d60:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00041d | 00041d40:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00041d80:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00041d | 00041d50:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00041d60:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041d70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041d80:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00041d90:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00041da0:· | 00041da0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 00041db0:· | 00041db0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 00041dc0:· | 00041dc0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 00041dd0:·6 | 00041dd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 00041de0:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 00041df0:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 00041e00:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 00041e10:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 00041e20:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 00041de0:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 00041df0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00041e00:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00041e10:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00041e20:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 00041e30:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 00041e40:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 00041e50:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 00041e60:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 00041e70:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 00041e80:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 00041e90:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 00041ea0:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 00041eb0:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 00041ec0:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 00041ed0:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 00041ee0:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 00041ef0:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 00041f00:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 00041f10:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 00041f20:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 00041f30:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 00041f40:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 00041f50:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 00041f60:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 00041 | 00041e30:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | ||
| 00041e40:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 00041e50:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 00041e60:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 00041e70:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 00041e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 00041e90:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 00041ea0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00041eb0:·6c69·6379·223e·4649·5053·3c2f·6162·6272··licy">FIPS</abbr | |||
| 00041ec0:·3e0a·2020·7461·6773·3a0a·2020·2020·2d20··>.··tags:.····-· | |||
| 00041ed0:·616c·7761·7973·0a0a·2d20·6e61·6d65·3a20··always..-·name:· | |||
| 00041ee0:·436f·6e66·6967·7572·6520·5379·7374·656d··Configure·System | |||
| 00041ef0:·2043·7279·7074·6f67·7261·7068·7920·506f···Cryptography·Po | |||
| 00041f00:·6c69·6379·0a20·206c·696e·6569·6e66·696c··licy.··lineinfil | |||
| 00041f10:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | |||
| 00041f20:·632f·6372·7970·746f·2d70·6f6c·6963·6965··c/crypto-policie | |||
| 00041f30:·732f·636f·6e66·6967·0a20·2020·2072·6567··s/config.····reg | |||
| 00041f40:·6578·703a·205e·283f·2123·2928·5c53·2b29··exp:·^(?!#)(\S+) | |||
| 00041f50:·240a·2020·2020·6c69·6e65·3a20·277b·7b20··$.····line:·'{{· | |||
| 00041f80:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 00041f90:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 00041fa0:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 00041fb0:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 00041fc0:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 00041fd0:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 00041fe0:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 00041ff0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00042000:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00042010:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00042020:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00042030:·2d74·6172·6765·743d·2223·6964·6d38·3735··-target="#idm875 | |||
| 00042040:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 00042050:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00042060:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00042070:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00042080:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00042090:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 000420a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 000420b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| Max diff block lines reached; 3385944/3419118 bytes (99.03%) of diff not shown. | |||
| Offset 75, 15 lines modified | Offset 75, 15 lines modified | ||
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 77 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 79 | ····*·cpe:/o:centos:centos:8 | 79 | ····*·cpe:/o:centos:centos:8 |
| 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 81 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 82 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 84 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 85 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 86 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 87 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 88 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 89 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 456, 39 lines modified | Offset 456, 14 lines modified | ||
| 456 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 456 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 457 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 457 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 458 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 458 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 459 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 459 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 460 | ············_\x8c_\x8i_\x8s······1.6.1 | 460 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 461 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 461 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 462 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 462 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 468 | --- | ||
| 469 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 470 | kind:·MachineConfig | ||
| 471 | spec: | ||
| 472 | ··config: | ||
| 473 | ····ignition: | ||
| 474 | ······version:·3.1.0 | ||
| 475 | ····systemd: | ||
| 476 | ······units: | ||
| 477 | ········-·name:·configure-crypto-policy.service | ||
| 478 | ··········enabled:·true | ||
| 479 | ··········contents:·| | ||
| 480 | ············[Unit] | ||
| 481 | ············Before=kubelet.service | ||
| 482 | ············[Service] | ||
| 483 | ············Type=oneshot | ||
| 484 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 485 | ············RemainAfterExit=yes | ||
| 486 | ············[Install] | ||
| 487 | ············WantedBy=multi-user.target | ||
| 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 493 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 468 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 494 | ··set_fact: | 469 | ··set_fact: |
| Offset 552, 14 lines modified | Offset 527, 39 lines modified | ||
| 552 | » echo·"to·see·what·package·to·(re)install"·>&2 | 527 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 553 | » false··#·end·with·an·error·code | 528 | » false··#·end·with·an·error·code |
| 554 | elif·test·"$rc"·!=·0;·then | 529 | elif·test·"$rc"·!=·0;·then |
| 555 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 530 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 556 | » false··#·end·with·an·error·code | 531 | » false··#·end·with·an·error·code |
| 557 | fi | 532 | fi |
| 533 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 534 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 535 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 536 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 537 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 538 | --- | ||
| 539 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 540 | kind:·MachineConfig | ||
| 541 | spec: | ||
| 542 | ··config: | ||
| 543 | ····ignition: | ||
| 544 | ······version:·3.1.0 | ||
| 545 | ····systemd: | ||
| 546 | ······units: | ||
| 547 | ········-·name:·configure-crypto-policy.service | ||
| 548 | ··········enabled:·true | ||
| 549 | ··········contents:·| | ||
| 550 | ············[Unit] | ||
| 551 | ············Before=kubelet.service | ||
| 552 | ············[Service] | ||
| 553 | ············Type=oneshot | ||
| 554 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 555 | ············RemainAfterExit=yes | ||
| 556 | ············[Install] | ||
| 557 | ············WantedBy=multi-user.target | ||
| 558 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 558 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 559 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 559 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 560 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 560 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 561 | Severity: ··medium | 561 | Severity: ··medium |
| 562 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 562 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 563 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 563 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 564 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 564 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1518, 33 lines modified | Offset 1518, 25 lines modified | ||
| 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1518 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1519 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1520 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1521 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1522 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1523 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1524 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1526 | [customizations.services] | ||
| 1527 | masked·=·["debug-shell"] | ||
| 1528 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1529 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:· | 1530 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:····· | 1531 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1532 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1533 | service·disable·debug-shell | ||
| 1530 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1531 | kind:·MachineConfig | ||
| 1532 | spec: | ||
| 1533 | ··config: | ||
| 1534 | ····ignition: | ||
| 1535 | ······version:·3.1.0 | ||
| 1536 | ····systemd: | ||
| 1537 | ······units: | ||
| 1538 | ······-·name:·debug-shell.service | ||
| 1539 | ········enabled:·false | ||
| 1540 | ········mask:·true | ||
| 1541 | ······-·name:·debug-shell.socket | ||
| 1542 | ········enabled:·false | ||
| Max diff block lines reached; 176941/183169 bytes (96.60%) of diff not shown. | |||
| Offset 14562, 15 lines modified | Offset 14562, 15 lines modified | ||
| 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038e10:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038e20:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038e30:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038e40:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038e50:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038e60:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038e70:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038e80:·206f·6620·3230·323 | 00038e80:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038e90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038ea0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038eb0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038ec0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038ed0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038ee0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038ef0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 17333, 236 lines modified | Offset 17333, 236 lines modified | ||
| 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00043b40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | 00043b50:·6964·6d38·3030·3222·2074·6162·696e·6465··idm8002"·tabinde | ||
| 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00043b60:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00043b70:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00043b80:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00043b90:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00043ba0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00043bb0:·656d·6564·6961·7469·6f6e·204 | 00043bb0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00043bc0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00043bd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00043be0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00043bf0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00043c00:·646d·3830·3032·223e·3c74·6162·6c65·2063··dm8002"><table·c | |||
| 00043c10:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00043c20:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00043c30:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00043c40:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00043 | 00043bc0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 00043bd0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00043be0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00043bf0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00043c00:·7073·6522·2069·643d·2269·646d·3830·3032··pse"·id="idm8002 | |||
| 00043c10:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00043c20:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00043c30:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 00043c40:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00043c50:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00043c60:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00043c70:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00043c80:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00043c90:·2d74·6172·6765·743d·2223·6964·6d38·3030··-target="#idm800 | |||
| 00043ca0:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 00043cb0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00043cc0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00043cd0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00043ce0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00043cf0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00043d00:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 00043d10:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00043d20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00043d30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00043d40:·6170·7365·2220·6964·3d22·6964·6d38·3030··apse"·id="idm800 | |||
| 00043d50:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00043d60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00043d70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00043d80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00043d90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00043da0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00043db0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043dc0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00043 | 00043dd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00043 | 00043de0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 00043df0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00043e00:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00043e10:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00043e20:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00043e30:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00043e40:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00043e50:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 00043e60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043e70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00043e80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00043e90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00043ea0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00043eb0:·2223·6964·6d38·3030·3422·2074·6162·696e··"#idm8004"·tabin | |||
| 00043ec0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043ed0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043ee0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043ef0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043f00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00043f10:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 00043f20:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 00043f30:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00043f40:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00043f50:·7365·2220·6964·3d22·6964·6d38·3030·3422··se"·id="idm8004" | |||
| 00043f60:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00043f70:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00043f80:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00043f90:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00043fa0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00043 | 00043fb0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00043 | 00043fc0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00043ca0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00043 | 00043fd0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00043fe0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043 | 00043ff0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0004 | 00044000:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 00043ce0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00043cf0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00043d00:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 00043d10:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 00043d20:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 00043d30:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 00043d40:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00043d50:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 00043d60:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00043d70:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00043d80:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00043d90:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00043da0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 00043db0:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 00043dc0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 00043dd0:·5449·472d·5248·454c·2d30·382d·3031·3033··TIG-RHEL-08-0103 | |||
| 00043de0:·3539·0a20·202d·204e·4953·542d·3830·302d··59.··-·NIST-800- | |||
| 00043df0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00043e00:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00043e10:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00043e20:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00043e30:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00043e40:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00043e50:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| Max diff block lines reached; 3696310/3728656 bytes (99.13%) of diff not shown. | |||
| Offset 73, 15 lines modified | Offset 73, 15 lines modified | ||
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 76 | ····*·cpe:/o:redhat:enterprise_linux:8 | 76 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 77 | ····*·cpe:/o:centos:centos:8 | 77 | ····*·cpe:/o:centos:centos:8 |
| 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 79 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 80 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 81 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 82 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 83 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 84 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 87 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 587, 14 lines modified | Offset 587, 33 lines modified | ||
| 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 587 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 588 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 589 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 590 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 591 | ············_\x8c_\x8i_\x8s············5.3.1 | 591 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 592 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 593 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 595 | [[packages]] | ||
| 596 | name·=·"aide" | ||
| 597 | version·=·"*" | ||
| 598 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 599 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 600 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 601 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 602 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 603 | package·--add=aide | ||
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 609 | package·install·aide | ||
| 594 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 610 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 595 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 611 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 596 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 612 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 597 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 613 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 598 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 614 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 599 | -·name:·Ensure·aide·is·installed | 615 | -·name:·Ensure·aide·is·installed |
| 600 | ··package: | 616 | ··package: |
| Offset 609, 38 lines modified | Offset 628, 14 lines modified | ||
| 609 | ··-·PCI-DSSv4-11.5.2 | 628 | ··-·PCI-DSSv4-11.5.2 |
| 610 | ··-·enable_strategy | 629 | ··-·enable_strategy |
| 611 | ··-·low_complexity | 630 | ··-·low_complexity |
| 612 | ··-·low_disruption | 631 | ··-·low_disruption |
| 613 | ··-·medium_severity | 632 | ··-·medium_severity |
| 614 | ··-·no_reboot_needed | 633 | ··-·no_reboot_needed |
| 615 | ··-·package_aide_installed | 634 | ··-·package_aide_installed |
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 617 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 618 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 619 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 620 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 621 | include·install_aide | ||
| 622 | class·install_aide·{ | ||
| 623 | ··package·{·'aide': | ||
| 624 | ····ensure·=>·'installed', | ||
| 625 | ··} | ||
| 626 | } | ||
| 627 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 628 | [[packages]] | ||
| 629 | name·=·"aide" | ||
| 630 | version·=·"*" | ||
| 631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 634 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 635 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 636 | package·install·aide | ||
| 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 635 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 636 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 637 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 638 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 639 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 642 | #·Remediation·is·applicable·only·in·certain·platforms | 640 | #·Remediation·is·applicable·only·in·certain·platforms |
| 643 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 641 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 648, 21 lines modified | Offset 643, 26 lines modified | ||
| 648 | if·!·rpm·-q·--quiet·"aide"·;·then | 643 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 649 | ····yum·install·-y·"aide" | 644 | ····yum·install·-y·"aide" |
| 650 | fi | 645 | fi |
| 651 | else | 646 | else |
| 652 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 647 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 653 | fi | 648 | fi |
| 654 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 649 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 655 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 650 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 656 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 651 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 657 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 652 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 658 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 653 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 654 | include·install_aide | ||
| 659 | 655 | class·install_aide·{ | |
| 656 | ··package·{·'aide': | ||
| 657 | ····ensure·=>·'installed', | ||
| 658 | ··} | ||
| 659 | } | ||
| 660 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 660 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 661 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 661 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 662 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 662 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 663 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 663 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 664 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 664 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 682, 14 lines modified | Offset 682, 18 lines modified | ||
| 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 682 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 683 | ············_\x8i_\x8s_\x8m······1446 | 683 | ············_\x8i_\x8s_\x8m······1446 |
| 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 688 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 690 | [customizations] | ||
| 691 | fips·=·true | ||
| Max diff block lines reached; 255193/261441 bytes (97.61%) of diff not shown. | |||
| Offset 14556, 15 lines modified | Offset 14556, 15 lines modified | ||
| 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038db0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038dc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038dd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038de0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038df0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038e00:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038e10:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038e20:·2032·3032·3 | 00038e20:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038e30:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038e40:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038e50:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038e60:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038e70:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038e80:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038e90:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15331, 235 lines modified | Offset 15331, 235 lines modified | ||
| 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003be20:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | 0003be30:·3030·3222·2074·6162·696e·6465·783d·2230··002"·tabindex="0 | ||
| 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003be40:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003be50:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003be60:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003be70:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003be80:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003be90:·6961·7469·6f6e·204 | 0003be90:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003bea0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003beb0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003bec0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003bed0:·6c61·7073·6522·2069·643d·2269·646d·3830··lapse"·id="idm80 | |||
| 0003bee0:·3032·223e·3c74·6162·6c65·2063·6c61·7373··02"><table·class | |||
| 0003bef0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003bf00:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003bf10:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003bf20:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b | 0003bea0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003beb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bec0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bed0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bee0:·2069·643d·2269·646d·3830·3032·223e·3c70···id="idm8002"><p | |||
| 0003bef0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003bf00:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003bf10:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003bf20:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003bf30:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003bf40:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003bf50:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003bf60:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003bf70:·6765·743d·2223·6964·6d38·3030·3322·2074··get="#idm8003"·t | |||
| 0003bf80:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003bf90:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003bfa0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003bfb0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003bfc0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003bfd0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003bfe0:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 0003bff0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c000:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c010:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c020:·2220·6964·3d22·6964·6d38·3030·3322·3e3c··"·id="idm8003">< | |||
| 0003c030:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c040:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c050:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c060:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c070:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c080:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c090:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c0a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003 | 0003c0b0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003 | 0003c0c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003c0d0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003c0e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c0f0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003c100:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003c110:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003c120:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003c130:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003c140:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003c150:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003c160:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003c170:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003c180:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003c190:·6d38·3030·3422·2074·6162·696e·6465·783d··m8004"·tabindex= | |||
| 0003c1a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003c1b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003c1c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003c1d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003c1e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003c1f0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003c200:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c210:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c220:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c230:·6964·3d22·6964·6d38·3030·3422·3e3c·7461··id="idm8004"><ta | |||
| 0003c240:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c250:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c260:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c270:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c280:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003 | 0003c290:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003c2a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c2b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c2c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003c2d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c2e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003 | 0003c2f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003bf80:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003bf90:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003bfa0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003bfb0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003bfc0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bfd0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003bfe0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003bff0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003c000:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003c010:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003c020:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003c030:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003c040:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003c050:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003c060:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003c070:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003c080:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003c090:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003c0a0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003c0b0:·5248·454c·2d30·382d·3031·3033·3539·0a20··RHEL-08-010359.· | |||
| 0003c0c0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003c0d0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003c0e0:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003c0f0:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| Max diff block lines reached; 6023420/6055628 bytes (99.47%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 130, 14 lines modified | Offset 130, 33 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············5.3.1 | 134 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 159 | ··package: |
| Offset 152, 38 lines modified | Offset 171, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 173 | ··-·low_complexity |
| 155 | ··-·low_disruption | 174 | ··-·low_disruption |
| 156 | ··-·medium_severity | 175 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | include·install_aide | ||
| 165 | class·install_aide·{ | ||
| 166 | ··package·{·'aide': | ||
| 167 | ····ensure·=>·'installed', | ||
| 168 | ··} | ||
| 169 | } | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·install·aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | 183 | #·Remediation·is·applicable·only·in·certain·platforms |
| 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 184 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 21 lines modified | Offset 186, 26 lines modified | ||
| 191 | if·!·rpm·-q·--quiet·"aide"·;·then | 186 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 192 | ····yum·install·-y·"aide" | 187 | ····yum·install·-y·"aide" |
| 193 | fi | 188 | fi |
| 194 | else | 189 | else |
| 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 196 | fi | 191 | fi |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | ||
| 202 | 198 | class·install_aide·{ | |
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 203 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 204 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 205 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 206 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 322 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 323 | ············_\x8i_\x8s_\x8m······1446 | 323 | ············_\x8i_\x8s_\x8m······1446 |
| 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 324 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 325 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 326 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 327 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| Max diff block lines reached; 517410/523678 bytes (98.80%) of diff not shown. | |||
| Offset 14550, 16 lines modified | Offset 14550, 16 lines modified | ||
| 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038d50:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038d60:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038d70:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038d80:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038d90:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038da0:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038db0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038dc0:·2020·2028·6173·206f·6620·3230·323 | 00038dc0:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00038dd0:·3 | 00038dd0:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038de0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038df0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038e00:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038e10:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00038e20:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00038e30:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038e40:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 16668, 236 lines modified | Offset 16668, 236 lines modified | ||
| 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000411b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | 000411c0:·646d·3830·3032·2220·7461·6269·6e64·6578··dm8002"·tabindex | ||
| 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000411d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000411e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000411f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00041200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00041210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00041220:·6d65·6469·6174·696f·6e20·4 | 00041220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00041230:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00041240:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00041250:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041260:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041270:·6d38·3030·3222·3e3c·7461·626c·6520·636c··m8002"><table·cl | |||
| 00041280:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041290:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000412a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000412b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000412 | 00041230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 00041240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00041250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00041260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00041270:·7365·2220·6964·3d22·6964·6d38·3030·3222··se"·id="idm8002" | |||
| 00041280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 00041290:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000412a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 000412b0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 000412c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000412d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000412e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 000412f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041300:·7461·7267·6574·3d22·2369·646d·3830·3033··target="#idm8003 | |||
| 00041310:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041320:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00041330:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00041340:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00041350:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00041360:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00041370:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 00041380:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00041390:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 000413a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 000413b0:·7073·6522·2069·643d·2269·646d·3830·3033··pse"·id="idm8003 | |||
| 000413c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 000413d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000413e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000413f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00041400:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00041410:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00041420:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00041430:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00041 | 00041440:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 00041 | 00041450:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 00041460:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00041470:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00041480:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00041490:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 000414a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 000414b0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 000414c0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 000414d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000414e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000414f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041500:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041510:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041520:·2369·646d·3830·3034·2220·7461·6269·6e64··#idm8004"·tabind | |||
| 00041530:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041540:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041550:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041560:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041570:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00041580:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 00041590:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 000415a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000415b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000415c0:·6522·2069·643d·2269·646d·3830·3034·223e··e"·id="idm8004"> | |||
| 000415d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 000415e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 000415f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041600:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00041610:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00041 | 00041620:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00041 | 00041630:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00041310:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00041320:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00041 | 00041640:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00041650:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00041660:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00041 | 00041670:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00041350:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00041360:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041370:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00041380:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00041390:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 000413a0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 000413b0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 000413c0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 000413d0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 000413e0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 000413f0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00041400:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00041410:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00041420:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 00041430:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 00041440:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 00041450:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00041460:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 00041470:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00041480:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00041490:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 000414a0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| Max diff block lines reached; 4223126/4255610 bytes (99.24%) of diff not shown. | |||
| Offset 71, 15 lines modified | Offset 71, 15 lines modified | ||
| 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 71 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 75 | ····*·cpe:/o:centos:centos:8 | 75 | ····*·cpe:/o:centos:centos:8 |
| 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 77 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 78 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 79 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 81 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 82 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 83 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 84 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 85 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 443, 14 lines modified | Offset 443, 33 lines modified | ||
| 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 443 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 444 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 445 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 446 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 447 | ············_\x8c_\x8i_\x8s············5.3.1 | 447 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 448 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 449 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 451 | [[packages]] | ||
| 452 | name·=·"aide" | ||
| 453 | version·=·"*" | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·--add=aide | ||
| 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 465 | package·install·aide | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 455 | -·name:·Ensure·aide·is·installed | 471 | -·name:·Ensure·aide·is·installed |
| 456 | ··package: | 472 | ··package: |
| Offset 465, 38 lines modified | Offset 484, 14 lines modified | ||
| 465 | ··-·PCI-DSSv4-11.5.2 | 484 | ··-·PCI-DSSv4-11.5.2 |
| 466 | ··-·enable_strategy | 485 | ··-·enable_strategy |
| 467 | ··-·low_complexity | 486 | ··-·low_complexity |
| 468 | ··-·low_disruption | 487 | ··-·low_disruption |
| 469 | ··-·medium_severity | 488 | ··-·medium_severity |
| 470 | ··-·no_reboot_needed | 489 | ··-·no_reboot_needed |
| 471 | ··-·package_aide_installed | 490 | ··-·package_aide_installed |
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 473 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 474 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 475 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 476 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 477 | include·install_aide | ||
| 478 | class·install_aide·{ | ||
| 479 | ··package·{·'aide': | ||
| 480 | ····ensure·=>·'installed', | ||
| 481 | ··} | ||
| 482 | } | ||
| 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 484 | [[packages]] | ||
| 485 | name·=·"aide" | ||
| 486 | version·=·"*" | ||
| 487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 490 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 491 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 492 | package·install·aide | ||
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 498 | #·Remediation·is·applicable·only·in·certain·platforms | 496 | #·Remediation·is·applicable·only·in·certain·platforms |
| 499 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 497 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 504, 21 lines modified | Offset 499, 26 lines modified | ||
| 504 | if·!·rpm·-q·--quiet·"aide"·;·then | 499 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 505 | ····yum·install·-y·"aide" | 500 | ····yum·install·-y·"aide" |
| 506 | fi | 501 | fi |
| 507 | else | 502 | else |
| 508 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 503 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 509 | fi | 504 | fi |
| 510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 510 | include·install_aide | ||
| 515 | 511 | class·install_aide·{ | |
| 512 | ··package·{·'aide': | ||
| 513 | ····ensure·=>·'installed', | ||
| 514 | ··} | ||
| 515 | } | ||
| 516 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 516 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 517 | Run·the·following·command·to·generate·a·new·database: | 517 | Run·the·following·command·to·generate·a·new·database: |
| 518 | $·sudo·/usr/sbin/aide·--init | 518 | $·sudo·/usr/sbin/aide·--init |
| 519 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 519 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 520 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 520 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 521 | To·initiate·a·manual·check,·run·the·following·command: | 521 | To·initiate·a·manual·check,·run·the·following·command: |
| 522 | $·sudo·/usr/sbin/aide·--check | 522 | $·sudo·/usr/sbin/aide·--check |
| Offset 811, 39 lines modified | Offset 811, 14 lines modified | ||
| 811 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 811 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 812 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 812 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 813 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 813 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 814 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 814 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 815 | ············_\x8c_\x8i_\x8s······1.6.1 | 815 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 816 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 816 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 817 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 817 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 818 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 819 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 820 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 821 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 263046/269551 bytes (97.59%) of diff not shown. | |||
| Offset 14560, 15 lines modified | Offset 14560, 15 lines modified | ||
| 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038df0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038e00:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038e10:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038e20:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038e30:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038e40:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038e50:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038e60:·3032·3 | 00038e60:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038e70:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038e80:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00038e90:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00038ea0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038eb0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038ec0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038ed0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15358, 235 lines modified | Offset 15358, 235 lines modified | ||
| 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | 0003bfd0:·6574·3d22·2369·646d·3830·3032·2220·7461··et="#idm8002"·ta | ||
| 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003bfe0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003bff0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003c000:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003c010:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003c020:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003c030:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003c040:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003c050:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c060:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c070:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c080:·6964·3d22·6964·6d38·3030·3222·3e3c·7461··id="idm8002"><ta | |||
| 0003c090:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003c0a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003c0b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003c0c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003c0d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003c0 | 0003c040:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003c050:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003c060:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c070:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c080:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c090:·6d38·3030·3222·3e3c·7072·653e·3c63·6f64··m8002"><pre><cod | |||
| 0003c0a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003c0b0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003c0c0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003c0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003c0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003c0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003c100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003c110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003c120:·646d·3830·3033·2220·7461·6269·6e64·6578··dm8003"·tabindex | |||
| 0003c130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003c140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003c150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003c160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003c170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003c180:·6d65·6469·6174·696f·6e20·416e·6163·6f6e··mediation·Anacon | |||
| 0003c190:·6461·2073·6e69·7070·6574·20e2·87b2·3c2f··da·snippet·...</ | |||
| 0003c1a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c1b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c1c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c1d0:·646d·3830·3033·223e·3c74·6162·6c65·2063··dm8003"><table·c | |||
| 0003c1e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003c1f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003c200:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003c210:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003c220:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003c230:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003c240:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003c250:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003c | 0003c260:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003c | 0003c270:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003c280:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c290:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c2a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003c2b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003c2c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003c2d0:·0a70·6163·6b61·6765·202d·2d61·6464·3d61··.package·--add=a | |||
| 0003c2e0:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003c2f0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003c300:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003c310:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003c320:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003c330:·7267·6574·3d22·2369·646d·3830·3034·2220··rget="#idm8004"· | |||
| 0003c340:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003c350:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003c360:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003c370:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003c380:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003c390:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003c3a0:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003c3b0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c3c0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c3d0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c3e0:·3830·3034·223e·3c74·6162·6c65·2063·6c61··8004"><table·cla | |||
| 0003c3f0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003c400:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003c410:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003c420:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003c430:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003c | 0003c440:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003c120:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003c130:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003c140:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c150:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003c160:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003c170:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003c180:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003c190:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003c1a0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003c1b0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003c1c0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003c1d0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003c1e0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003c1f0:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003c200:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003c210:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003c220:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003c230:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003c240:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003c250:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003c260:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003c270:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003c280:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003c290:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003c2a0:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003c2b0:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003c2c0:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003c2d0:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003c2e0:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| Max diff block lines reached; 6395185/6427393 bytes (99.50%) of diff not shown. | |||
| Offset 72, 15 lines modified | Offset 72, 15 lines modified | ||
| 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 72 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 73 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 74 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 75 | ····*·cpe:/o:redhat:enterprise_linux:8 | 75 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 76 | ····*·cpe:/o:centos:centos:8 | 76 | ····*·cpe:/o:centos:centos:8 |
| 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 77 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 78 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 79 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 80 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 81 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 82 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 83 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 84 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 85 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 86 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············5.3.1 | 139 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 157, 38 lines modified | Offset 176, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 178 | ··-·low_complexity |
| 160 | ··-·low_disruption | 179 | ··-·low_disruption |
| 161 | ··-·medium_severity | 180 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | include·install_aide | ||
| 170 | class·install_aide·{ | ||
| 171 | ··package·{·'aide': | ||
| 172 | ····ensure·=>·'installed', | ||
| 173 | ··} | ||
| 174 | } | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | 188 | #·Remediation·is·applicable·only·in·certain·platforms |
| 191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 189 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 196, 21 lines modified | Offset 191, 26 lines modified | ||
| 196 | if·!·rpm·-q·--quiet·"aide"·;·then | 191 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 197 | ····yum·install·-y·"aide" | 192 | ····yum·install·-y·"aide" |
| 198 | fi | 193 | fi |
| 199 | else | 194 | else |
| 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 201 | fi | 196 | fi |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | include·install_aide | ||
| 207 | 203 | class·install_aide·{ | |
| 204 | ··package·{·'aide': | ||
| 205 | ····ensure·=>·'installed', | ||
| 206 | ··} | ||
| 207 | } | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 209 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 210 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 212 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 212 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 213 | To·initiate·a·manual·check,·run·the·following·command: | 213 | To·initiate·a·manual·check,·run·the·following·command: |
| 214 | $·sudo·/usr/sbin/aide·--check | 214 | $·sudo·/usr/sbin/aide·--check |
| Offset 1717, 14 lines modified | Offset 1717, 18 lines modified | ||
| 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1717 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1718 | ············_\x8i_\x8s_\x8m······1446 | 1718 | ············_\x8i_\x8s_\x8m······1446 |
| 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1719 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1720 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1721 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1722 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1723 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1724 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1725 | [customizations] | ||
| 1726 | fips·=·true | ||
| Max diff block lines reached; 483626/489486 bytes (98.80%) of diff not shown. | |||
| Offset 14584, 15 lines modified | Offset 14584, 15 lines modified | ||
| 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038f70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038f80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038f90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038fa0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038fb0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038fc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00038fd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00038fe0:·6f66·2032·3032·3 | 00038fe0:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00038ff0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039000:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039010:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039020:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039030:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039040:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00039050:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 15377, 235 lines modified | Offset 15377, 235 lines modified | ||
| 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | 0003c100:·6765·743d·2223·6964·6d38·3030·3222·2074··get="#idm8002"·t | ||
| 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003c110:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003c120:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003c130:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003c140:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003c150:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003c160:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003c170:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003c180:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003c190:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003c1a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003c1 | 0003c170:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003c180:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003c190:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003c1a0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003c1b0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003c1c0:·646d·3830·3032·223e·3c70·7265·3e3c·636f··dm8002"><pre><co | |||
| 0003c1d0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003c1e0:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003c1f0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003c200:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003c | 0003c210:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003c1d0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003c1e0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003c1f0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003c2 | 0003c220:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 0003c230:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003c240:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003c250:·6964·6d38·3030·3322·2074·6162·696e·6465··idm8003"·tabinde | |||
| 0003c260:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003c270:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003c280:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003c290:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003c2a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003c2b0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003c2c0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003c2d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c2e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c2f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c300:·6964·6d38·3030·3322·3e3c·7461·626c·6520··idm8003"><table· | |||
| 0003c310:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c320:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c330:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c340:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c350:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003c360:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003c370:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003c380:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003c390:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003c3a0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003c3b0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003c3c0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003c | 0003c3d0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003c220:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003c | 0003c3e0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003c3f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003c400:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003c410:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003c420:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003c430:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003c440:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003c450:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003c460:·6172·6765·743d·2223·6964·6d38·3030·3422··arget="#idm8004" | |||
| 0003c470:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003c480:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003c490:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003c4a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003c4b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003c4c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003c4d0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003c4e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003c4f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003c500:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003c510:·6d38·3030·3422·3e3c·7461·626c·6520·636c··m8004"><table·cl | |||
| 0003c520:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003c530:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003c540:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003c550:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003c560:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003c | 0003c570:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003c250:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003c | 0003c580:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003c590:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003c | 0003c5a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003c280:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003c290:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003c2a0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003c2b0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003c2c0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003c2d0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003c2e0:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003c2f0:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003c300:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003c310:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003c320:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003c330:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003c340:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003c350:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003c360:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003c370:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003c380:·4449·5341·2d53·5449·472d·5248·454c·2d30··DISA-STIG-RHEL-0 | |||
| 0003c390:·382d·3031·3033·3539·0a20·202d·204e·4953··8-010359.··-·NIS | |||
| 0003c3a0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003c3b0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003c3c0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003c3d0:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003c3e0:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003c3f0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003c400:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003c410:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003c420:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| Max diff block lines reached; 6297324/6329532 bytes (99.49%) of diff not shown. | |||
| Offset 78, 15 lines modified | Offset 78, 15 lines modified | ||
| 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 78 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 79 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 80 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 81 | ····*·cpe:/o:redhat:enterprise_linux:8 | 81 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 82 | ····*·cpe:/o:centos:centos:8 | 82 | ····*·cpe:/o:centos:centos:8 |
| 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 83 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 84 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 85 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 86 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 87 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 88 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 89 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 91 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 92 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 140, 14 lines modified | Offset 140, 33 lines modified | ||
| 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 140 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 142 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 143 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 144 | ············_\x8c_\x8i_\x8s············5.3.1 | 144 | ············_\x8c_\x8i_\x8s············5.3.1 |
| 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 145 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 146 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·--add=aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 162 | package·install·aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 152 | -·name:·Ensure·aide·is·installed | 168 | -·name:·Ensure·aide·is·installed |
| 153 | ··package: | 169 | ··package: |
| Offset 162, 38 lines modified | Offset 181, 14 lines modified | ||
| 162 | ··-·PCI-DSSv4-11.5.2 | 181 | ··-·PCI-DSSv4-11.5.2 |
| 163 | ··-·enable_strategy | 182 | ··-·enable_strategy |
| 164 | ··-·low_complexity | 183 | ··-·low_complexity |
| 165 | ··-·low_disruption | 184 | ··-·low_disruption |
| 166 | ··-·medium_severity | 185 | ··-·medium_severity |
| 167 | ··-·no_reboot_needed | 186 | ··-·no_reboot_needed |
| 168 | ··-·package_aide_installed | 187 | ··-·package_aide_installed |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 181 | [[packages]] | ||
| 182 | name·=·"aide" | ||
| 183 | version·=·"*" | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 189 | package·install·aide | ||
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 195 | #·Remediation·is·applicable·only·in·certain·platforms | 193 | #·Remediation·is·applicable·only·in·certain·platforms |
| 196 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 194 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 201, 21 lines modified | Offset 196, 26 lines modified | ||
| 201 | if·!·rpm·-q·--quiet·"aide"·;·then | 196 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 202 | ····yum·install·-y·"aide" | 197 | ····yum·install·-y·"aide" |
| 203 | fi | 198 | fi |
| 204 | else | 199 | else |
| 205 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 206 | fi | 201 | fi |
| 207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 207 | include·install_aide | ||
| 212 | 208 | class·install_aide·{ | |
| 209 | ··package·{·'aide': | ||
| 210 | ····ensure·=>·'installed', | ||
| 211 | ··} | ||
| 212 | } | ||
| 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 214 | Run·the·following·command·to·generate·a·new·database: | 214 | Run·the·following·command·to·generate·a·new·database: |
| 215 | $·sudo·/usr/sbin/aide·--init | 215 | $·sudo·/usr/sbin/aide·--init |
| 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 216 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 217 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 218 | To·initiate·a·manual·check,·run·the·following·command: | 218 | To·initiate·a·manual·check,·run·the·following·command: |
| 219 | $·sudo·/usr/sbin/aide·--check | 219 | $·sudo·/usr/sbin/aide·--check |
| Offset 1722, 14 lines modified | Offset 1722, 18 lines modified | ||
| 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1722 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1723 | ············_\x8i_\x8s_\x8m······1446 | 1723 | ············_\x8i_\x8s_\x8m······1446 |
| 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1724 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1725 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1726 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1727 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1728 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1730 | [customizations] | ||
| 1731 | fips·=·true | ||
| Max diff block lines reached; 475123/480983 bytes (98.78%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038620:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038630:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038640:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038650:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038660:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038670:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038680:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038690:·6620·3230·323 | 00038690:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386a0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386b0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386c0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386d0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386e0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386f0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038700:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15180, 234 lines modified | Offset 15180, 234 lines modified | ||
| 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b4b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | 0003b4c0:·646d·3732·3733·2220·7461·6269·6e64·6578··dm7273"·tabindex | ||
| 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b4d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b4e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b4f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b500:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b510:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b520:·6d65·6469·6174·696f·6e20·4 | 0003b520:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b530:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b540:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b550:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b560:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b570:·6d37·3237·3322·3e3c·7461·626c·6520·636c··m7273"><table·cl | |||
| 0003b580:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b590:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b5a0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b5b0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b5 | 0003b530:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b540:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b550:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b560:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b570:·7365·2220·6964·3d22·6964·6d37·3237·3322··se"·id="idm7273" | |||
| 0003b580:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b590:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b5a0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b5b0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b5c0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b5d0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b5e0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b5f0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3732·3734··target="#idm7274 | |||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b670:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003b680:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b690:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b6a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b6b0:·7073·6522·2069·643d·2269·646d·3732·3734··pse"·id="idm7274 | |||
| 0003b6c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b6d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b6e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b6f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b700:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b710:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b720:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b730:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b740:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b750:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b760:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b770:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b780:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b790:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b7a0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b7b0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b7c0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003b7d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b7e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b7f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b800:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b810:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b820:·2369·646d·3732·3735·2220·7461·6269·6e64··#idm7275"·tabind | |||
| 0003b830:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b840:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b850:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b860:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b870:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b880:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b890:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3732·3735·223e··e"·id="idm7275"> | |||
| 0003b8d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b8e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b8f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b900:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b910:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b920:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b940:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b960:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b970:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b980:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b990:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b9c0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b9d0:·2069·6e73·7461·6c6c·2061·6964·650a·3c2f···install·aide.</ | |||
| 0003b9e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b9f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003ba00:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003ba10:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003ba20:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003ba30:·2369·646d·3732·3736·2220·7461·6269·6e64··#idm7276"·tabind | |||
| 0003ba40:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003ba50:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003ba60:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003ba70:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003ba80:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003ba90:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003baa0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003bab0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bac0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bad0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bae0:·6964·6d37·3237·3622·3e3c·7461·626c·6520··idm7276"><table· | |||
| 0003baf0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bb00:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| Max diff block lines reached; 5471712/5503782 bytes (99.42%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 140, 38 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | include·install_aide | ||
| 153 | class·install_aide·{ | ||
| 154 | ··package·{·'aide': | ||
| 155 | ····ensure·=>·'installed', | ||
| 156 | ··} | ||
| 157 | } | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 174, 26 lines modified | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | 174 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 180 | ····dnf·install·-y·"aide" | 175 | ····dnf·install·-y·"aide" |
| 181 | fi | 176 | fi |
| 182 | else | 177 | else |
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 184 | fi | 179 | fi |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | ||
| 190 | 186 | class·install_aide·{ | |
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 326, 45 lines modified | Offset 326, 45 lines modified | ||
| 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 326 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 327 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | [[customizations.filesystem]] | 329 | [[customizations.filesystem]] |
| 330 | mountpoint·=·"/home" | 330 | mountpoint·=·"/home" |
| 331 | size·=·1073741824 | 331 | size·=·1073741824 |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | logvol·/home·1024 | ||
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 281731/287382 bytes (98.03%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038610:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038620:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038630:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038640:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038650:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038660:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038670:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038680:·6620·3230·323 | 00038680:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038690:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386a0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386b0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386c0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386d0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386e0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386f0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15185, 234 lines modified | Offset 15185, 234 lines modified | ||
| 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b500:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b510:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b570:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b570:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b580:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b590:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b5a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b5b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b5c0:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b5d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b5e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b5f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b600:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b | 0003b580:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b590:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b5a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b5b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b5c0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b5d0:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | |||
| 0003b5e0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b5f0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b600:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b610:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b620:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b630:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b640:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b650:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b660:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b670:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b680:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b690:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b6c0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b6d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b6e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b6f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b700:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b710:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | |||
| 0003b720:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b730:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b740:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b750:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b760:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b770:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b780:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b790:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b7a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b7b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b7c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b7d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b7e0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b7f0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b800:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b810:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003b820:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b830:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b840:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b850:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b860:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b870:·743d·2223·6964·6d37·3237·3522·2074·6162··t="#idm7275"·tab | |||
| 0003b880:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b890:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b8a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b8b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b8c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b8d0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b8e0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b8f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b900:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b910:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b920:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b930:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b940:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b950:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b960:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b970:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b980:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b990:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b9a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b9b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b9c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b9d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b9e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b9f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003ba00:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003ba10:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003ba20:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003ba30:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ba40:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ba50:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba60:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba80:·743d·2223·6964·6d37·3237·3622·2074·6162··t="#idm7276"·tab | |||
| 0003ba90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003baa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bab0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bac0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bad0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bae0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003baf0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003bb00:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bb10:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bb20:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bb30:·643d·2269·646d·3732·3736·223e·3c74·6162··d="idm7276"><tab | |||
| 0003bb40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bb50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| Max diff block lines reached; 5566490/5598560 bytes (99.43%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 77 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 78 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 141, 38 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | include·install_aide | ||
| 154 | class·install_aide·{ | ||
| 155 | ··package·{·'aide': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 175, 26 lines modified | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | 175 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 181 | ····dnf·install·-y·"aide" | 176 | ····dnf·install·-y·"aide" |
| 182 | fi | 177 | fi |
| 183 | else | 178 | else |
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 185 | fi | 180 | fi |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | ||
| 191 | 187 | class·install_aide·{ | |
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 793, 45 lines modified | Offset 793, 45 lines modified | ||
| 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 793 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 794 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 795 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 796 | [[customizations.filesystem]] | 796 | [[customizations.filesystem]] |
| 797 | mountpoint·=·"/home" | 797 | mountpoint·=·"/home" |
| 798 | size·=·1073741824 | 798 | size·=·1073741824 |
| 799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 800 | logvol·/home·1024 | ||
| 801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 292600/298198 bytes (98.12%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038630:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038640:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038650:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038660:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038670:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038680:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038690:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000386a0:·6620·3230·323 | 000386a0:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000386b0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000386c0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000386d0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000386e0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386f0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038700:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038710:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15176, 234 lines modified | Offset 15176, 234 lines modified | ||
| 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003b470:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 0003b480:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b490:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b4a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b4b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b4c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b4d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4e0:·6961·7469·6f6e·204 | 0003b4e0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b4f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b500:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b510:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b520:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b530:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 0003b540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b560:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b | 0003b4f0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b500:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b510:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b520:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b530:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 0003b540:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b550:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b560:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b570:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b580:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b590:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b5a0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b5b0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b5c0:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 0003b5d0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b5e0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b5f0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b600:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b610:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b620:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b630:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 0003b640:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b650:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b660:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b670:·2220·6964·3d22·6964·6d37·3237·3422·3e3c··"·id="idm7274">< | |||
| 0003b680:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b690:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b6a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b6b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b6d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b6e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b6f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b | 0003b700:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b710:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 0003b720:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b730:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b740:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b750:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b760:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b770:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003b780:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 0003b790:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b7a0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7b0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7c0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7e0:·6d37·3237·3522·2074·6162·696e·6465·783d··m7275"·tabindex= | |||
| 0003b7f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b800:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b810:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b820:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b830:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b840:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 0003b850:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b880:·6964·3d22·6964·6d37·3237·3522·3e3c·7461··id="idm7275"><ta | |||
| 0003b890:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b8a0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b8b0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b8c0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b8d0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b8e0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 0003b | 0003b8f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b900:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b910:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b920:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b930:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b940:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b950:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b960:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b970:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b980:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 0003b990:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 0003b9a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b9b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b9c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b9d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b9e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b9f0:·6d37·3237·3622·2074·6162·696e·6465·783d··m7276"·tabindex= | |||
| 0003ba00:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003ba10:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003ba20:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003ba30:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ba40:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003ba50:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003ba60:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ba70:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba80:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba90:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003baa0:·3732·3736·223e·3c74·6162·6c65·2063·6c61··7276"><table·cla | |||
| 0003bab0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bac0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| Max diff block lines reached; 3131946/3164016 bytes (98.99%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 135 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 136 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 139 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 140 | ············_\x8c_\x8i_\x8s············6.1.1 | 140 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 141 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 156, 38 lines modified | Offset 175, 14 lines modified | ||
| 156 | ··-·PCI-DSSv4-11.5.2 | 175 | ··-·PCI-DSSv4-11.5.2 |
| 157 | ··-·enable_strategy | 176 | ··-·enable_strategy |
| 158 | ··-·low_complexity | 177 | ··-·low_complexity |
| 159 | ··-·low_disruption | 178 | ··-·low_disruption |
| 160 | ··-·medium_severity | 179 | ··-·medium_severity |
| 161 | ··-·no_reboot_needed | 180 | ··-·no_reboot_needed |
| 162 | ··-·package_aide_installed | 181 | ··-·package_aide_installed |
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | include·install_aide | ||
| 169 | class·install_aide·{ | ||
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | [[packages]] | ||
| 176 | name·=·"aide" | ||
| 177 | version·=·"*" | ||
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 183 | package·install·aide | ||
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | #·Remediation·is·applicable·only·in·certain·platforms | 187 | #·Remediation·is·applicable·only·in·certain·platforms |
| 190 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 195, 21 lines modified | Offset 190, 26 lines modified | ||
| 195 | if·!·rpm·-q·--quiet·"aide"·;·then | 190 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 196 | ····dnf·install·-y·"aide" | 191 | ····dnf·install·-y·"aide" |
| 197 | fi | 192 | fi |
| 198 | else | 193 | else |
| 199 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 194 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 200 | fi | 195 | fi |
| 201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 196 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 197 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 198 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 199 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 200 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 201 | include·install_aide | ||
| 206 | 202 | class·install_aide·{ | |
| 203 | ··package·{·'aide': | ||
| 204 | ····ensure·=>·'installed', | ||
| 205 | ··} | ||
| 206 | } | ||
| 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 207 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 208 | Run·the·following·command·to·generate·a·new·database: | 208 | Run·the·following·command·to·generate·a·new·database: |
| 209 | $·sudo·/usr/sbin/aide·--init | 209 | $·sudo·/usr/sbin/aide·--init |
| 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 210 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 211 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 212 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 213 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 365, 24 lines modified | Offset 365, 24 lines modified | ||
| 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 365 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 366 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | [[customizations.filesystem]] | 368 | [[customizations.filesystem]] |
| 369 | mountpoint·=·"/home" | 369 | mountpoint·=·"/home" |
| 370 | size·=·1073741824 | 370 | size·=·1073741824 |
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 372 | logvol·/home·1024 | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 194572/200112 bytes (97.23%) of diff not shown. | |||
| Offset 14435, 15 lines modified | Offset 14435, 15 lines modified | ||
| 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038620:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038630:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038640:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038650:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038660:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038670:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038680:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038690:·323 | 00038690:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386a0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386b0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386c0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386d0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386e0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386f0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038700:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14854, 217 lines modified | Offset 14854, 217 lines modified | ||
| 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003a050:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | 0003a060:·3d22·2369·646d·3130·3632·3222·2074·6162··="#idm10622"·tab | ||
| 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003a070:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003a080:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003a090:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003a0a0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003a0b0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003a0c0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003a0d0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003a0e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a0f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a100:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a110:·643d·2269·646d·3130·3632·3222·3e3c·7461··d="idm10622"><ta | |||
| 0003a120:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a130:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a140:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a150:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a160:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a170:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a180:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a190:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a1b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a1c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a1d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a1e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a1f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003a200:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a210:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003a220:·7572·6520·646e·662d·6175·746f·6d61·7469··ure·dnf-automati | |||
| 0003a230:·6320·6973·2069·6e73·7461·6c6c·6564·0a20··c·is·installed.· | |||
| 0003a240:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003a250:·6d65·3a20·646e·662d·6175·746f·6d61·7469··me:·dnf-automati | |||
| 0003a260:·630a·2020·2020·7374·6174·653a·2070·7265··c.····state:·pre | |||
| 0003a270:·7365·6e74·0a20·2074·6167·733a·0a20·202d··sent.··tags:.··- | |||
| 0003a280:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003a290:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003a2a0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003a2b0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003a2c0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003a2d0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003a2e0:·2020·2d20·7061·636b·6167·655f·646e·662d····-·package_dnf- | |||
| 0003a2f0:·6175·746f·6d61·7469·635f·696e·7374·616c··automatic_instal | |||
| 0003a | 0003a0d0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003a0e0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a0f0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a100:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a110:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a120:·3130·3632·3222·3e3c·7072·653e·3c63·6f64··10622"><pre><cod | |||
| 0003a130:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003a140:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 0003a150:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 0003a160:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003a170:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003a180:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003a190:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003a1a0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003a1b0:·6172·6765·743d·2223·6964·6d31·3036·3233··arget="#idm10623 | |||
| 0003a1c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003a1d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003a1e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003a1f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003a200:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003a210:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003a220:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003a230:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003a240:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003a250:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003a260:·7073·6522·2069·643d·2269·646d·3130·3632··pse"·id="idm1062 | |||
| 0003a270:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003a280:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a290:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a2a0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a2b0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a2c0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a2d0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a2e0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a2f0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a300:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a310:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a320:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a330:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a340:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a350:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a360:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003a370:·6167·6520·2d2d·6164·643d·646e·662d·6175··age·--add=dnf-au | |||
| 0003a380:·746f·6d61·7469·630a·3c2f·636f·6465·3e3c··tomatic.</code>< | |||
| 0003a3 | 0003a390:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0003a3 | 0003a3a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0003a3 | 0003a3b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0003a3 | 0003a3c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0003a3 | 0003a3d0:·612d·7461·7267·6574·3d22·2369·646d·3130··a-target="#idm10 | ||
| 0003a3 | 0003a3e0:·3632·3422·2074·6162·696e·6465·783d·2230··624"·tabindex="0 | ||
| 0003a3 | 0003a3f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003a | 0003a400:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003a | 0003a410:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003a | 0003a420:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003a3 | 0003a430:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003a | 0003a440:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | ||
| 0003a450:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003a460:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003a470:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003a480:·3d22·6964·6d31·3036·3234·223e·3c74·6162··="idm10624"><tab | |||
| 0003a490:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003a4a0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003a4b0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003a4c0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003a4d0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a4e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a4f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003a500:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| Max diff block lines reached; 368410/398134 bytes (92.53%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 77 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 78 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | $·sudo·dnf·install·dnf-automatic | 101 | $·sudo·dnf·install·dnf-automatic |
| 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 102 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 103 | ············suitable·for·automatic,·regular·execution. | 103 | ············suitable·for·automatic,·regular·execution. |
| 104 | Severity: ··medium | 104 | Severity: ··medium |
| 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 105 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 106 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"dnf-automatic" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=dnf-automatic | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·dnf-automatic | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·dnf-automatic·is·installed | 129 | -·name:·Ensure·dnf-automatic·is·installed |
| 114 | ··package: | 130 | ··package: |
| Offset 117, 54 lines modified | Offset 136, 35 lines modified | ||
| 117 | ··tags: | 136 | ··tags: |
| 118 | ··-·enable_strategy | 137 | ··-·enable_strategy |
| 119 | ··-·low_complexity | 138 | ··-·low_complexity |
| 120 | ··-·low_disruption | 139 | ··-·low_disruption |
| 121 | ··-·medium_severity | 140 | ··-·medium_severity |
| 122 | ··-·no_reboot_needed | 141 | ··-·no_reboot_needed |
| 123 | ··-·package_dnf-automatic_installed | 142 | ··-·package_dnf-automatic_installed |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | include·install_dnf-automatic | ||
| 130 | class·install_dnf-automatic·{ | ||
| 131 | ··package·{·'dnf-automatic': | ||
| 132 | ····ensure·=>·'installed', | ||
| 133 | ··} | ||
| 134 | } | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"dnf-automatic" | ||
| 138 | version·=·"*" | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·dnf-automatic | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 148 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 151 | ····dnf·install·-y·"dnf-automatic" | 149 | ····dnf·install·-y·"dnf-automatic" |
| 152 | fi | 150 | fi |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | include·install_dnf-automatic | ||
| 157 | class·install_dnf-automatic·{ | ||
| 158 | package· | 158 | ··package·{·'dnf-automatic': |
| 159 | ····ensure·=>·'installed', | ||
| 160 | ··} | ||
| 161 | } | ||
| 159 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 160 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 163 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 161 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 164 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 162 | automatic.conf. | 165 | automatic.conf. |
| 163 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 166 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 164 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 167 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 165 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 168 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 8934, 14 lines modified | Offset 8934, 28 lines modified | ||
| 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 8934 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 8935 | ···························A.9.1.2 | 8935 | ···························A.9.1.2 |
| 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 8936 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 8937 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 8938 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 8939 | ············_\x8c_\x8i_\x8s············2.1.3 | 8939 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 8940 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 8941 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8942 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8943 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8944 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8945 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 8946 | package·--remove=dhcp | ||
| 8947 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 8948 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8949 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43173/49056 bytes (88.01%) of diff not shown. | |||
| Offset 14406, 15 lines modified | Offset 14406, 15 lines modified | ||
| 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038450:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038460:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038470:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038480:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038490:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 000384a0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 000384b0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 000384c0:·206f·6620·3230·323 | 000384c0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000384d0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 000384e0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 000384f0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038500:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038510:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038520:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038530:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15219, 233 lines modified | Offset 15219, 233 lines modified | ||
| 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 0003b720:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003b730:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003b740:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003b750:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003b760:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003b770:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003b780:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003b790:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b7a0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b7b0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b7c0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b7d0:·2069·643d·2269·646d·3732·3733·223e·3c74···id="idm7273"><t | |||
| 0003b7e0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b7f0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b800:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b810:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b | 0003b790:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003b7a0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b7b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b7c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b7d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b7e0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | |||
| 0003b7f0:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b800:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b810:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b820:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b830:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b840:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b850:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b860:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b870:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 0003b880:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b890:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b8a0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b8b0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b8c0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b8d0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003b8e0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003b8f0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b900:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b910:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b920:·6964·6d37·3237·3422·3e3c·7461·626c·6520··idm7274"><table· | |||
| 0003b930:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b940:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b950:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b960:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b970:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b980:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b990:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b9a0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b9b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b9c0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b9d0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b9e0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b | 0003b9f0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 0003b840:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b | 0003ba00:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 0003ba10:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003ba20:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 0003ba30:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003ba40:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003ba50:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003ba60:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003ba70:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003ba80:·6172·6765·743d·2223·6964·6d37·3237·3522··arget="#idm7275" | |||
| 0003ba90:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003baa0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bab0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bac0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bad0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bae0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003baf0:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 0003bb00:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003bb10:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003bb20:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003bb30:·6d37·3237·3522·3e3c·7461·626c·6520·636c··m7275"><table·cl | |||
| 0003bb40:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003bb50:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003bb60:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003bb70:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003bb80:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b | 0003bb90:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b870:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003bba0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 0003bbb0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b | 0003bbc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003bbd0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bbe0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bbf0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bc00:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bc10:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003bc20:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003bc30:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 0003bc40:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 0003bc50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bc60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bc70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bc80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bc90:·6172·6765·743d·2223·6964·6d37·3237·3622··arget="#idm7276" | |||
| 0003bca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bcb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bcc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bcd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bce0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bcf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd00:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bd10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bd20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bd30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bd40:·6522·2069·643d·2269·646d·3732·3736·223e··e"·id="idm7276"> | |||
| 0003bd50:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| Max diff block lines reached; 7484640/7516572 bytes (99.58%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 125 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·install·aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 153 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 154 | ··package: |
| Offset 146, 38 lines modified | Offset 165, 14 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 165 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 166 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 167 | ··-·low_complexity |
| 149 | ··-·low_disruption | 168 | ··-·low_disruption |
| 150 | ··-·medium_severity | 169 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 170 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 171 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | include·install_aide | ||
| 159 | class·install_aide·{ | ||
| 160 | ··package·{·'aide': | ||
| 161 | ····ensure·=>·'installed', | ||
| 162 | ··} | ||
| 163 | } | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | package·install·aide | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | #·Remediation·is·applicable·only·in·certain·platforms | 177 | #·Remediation·is·applicable·only·in·certain·platforms |
| 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 185, 21 lines modified | Offset 180, 26 lines modified | ||
| 185 | if·!·rpm·-q·--quiet·"aide"·;·then | 180 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 186 | ····dnf·install·-y·"aide" | 181 | ····dnf·install·-y·"aide" |
| 187 | fi | 182 | fi |
| 188 | else | 183 | else |
| 189 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 190 | fi | 185 | fi |
| 191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 191 | include·install_aide | ||
| 196 | 192 | class·install_aide·{ | |
| 193 | ··package·{·'aide': | ||
| 194 | ····ensure·=>·'installed', | ||
| 195 | ··} | ||
| 196 | } | ||
| 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 197 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 198 | Run·the·following·command·to·generate·a·new·database: | 198 | Run·the·following·command·to·generate·a·new·database: |
| 199 | $·sudo·/usr/sbin/aide·--init | 199 | $·sudo·/usr/sbin/aide·--init |
| 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 200 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 201 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 202 | To·initiate·a·manual·check,·run·the·following·command: | 202 | To·initiate·a·manual·check,·run·the·following·command: |
| 203 | $·sudo·/usr/sbin/aide·--check | 203 | $·sudo·/usr/sbin/aide·--check |
| Offset 651, 39 lines modified | Offset 651, 14 lines modified | ||
| 651 | ············_\x8i_\x8s_\x8m······1446 | 651 | ············_\x8i_\x8s_\x8m······1446 |
| 652 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 652 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 653 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 653 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 654 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 654 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 655 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 655 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 656 | ············_\x8c_\x8i_\x8s······1.6.1 | 656 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 657 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 657 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 658 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 659 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 660 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 661 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 493102/499593 bytes (98.70%) of diff not shown. | |||
| Offset 14407, 15 lines modified | Offset 14407, 15 lines modified | ||
| 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038460:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038470:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038480:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038490:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 000384a0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 000384b0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 000384c0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000384d0:·323 | 000384d0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000384e0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000384f0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038500:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038510:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038520:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038530:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038540:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15187, 234 lines modified | Offset 15187, 234 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b530:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20·4 | 0003b590:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b5a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b5b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5e0:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b5f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b600:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b610:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b620:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b | 0003b5a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b5b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b5f0:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b600:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b610:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b620:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b630:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b640:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b650:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b660:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b670:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b680:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b690:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b6a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b6b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b6e0:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b6f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b700:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b710:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b720:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b730:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b740:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b750:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b760:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b770:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b780:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b790:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b7b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b7c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b7d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b7e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b7f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b800:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b810:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b820:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b830:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b840:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b850:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b860:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b870:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b890:·3d22·2369·646d·3732·3735·2220·7461·6269··="#idm7275"·tabi | |||
| 0003b8a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b8b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b8c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b900:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b910:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b920:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b930:·7073·6522·2069·643d·2269·646d·3732·3735··pse"·id="idm7275 | |||
| 0003b940:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b950:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b960:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b970:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b980:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b990:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003b9a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b9b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b9c0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b9e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b9f0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba30:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003ba40:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003ba50:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ba60:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba70:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba80:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003baa0:·3d22·2369·646d·3732·3736·2220·7461·6269··="#idm7276"·tabi | |||
| 0003bab0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bac0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bad0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bae0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003baf0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bb00:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003bb10:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003bb20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bb30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bb40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bb50:·3d22·6964·6d37·3237·3622·3e3c·7461·626c··="idm7276"><tabl | |||
| 0003bb60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bb70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| Max diff block lines reached; 4276891/4308961 bytes (99.26%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Server | 58 | ··············Server |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 120 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 141, 38 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | include·install_aide | ||
| 154 | class·install_aide·{ | ||
| 155 | ··package·{·'aide': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 175, 26 lines modified | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | 175 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 181 | ····dnf·install·-y·"aide" | 176 | ····dnf·install·-y·"aide" |
| 182 | fi | 177 | fi |
| 183 | else | 178 | else |
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 185 | fi | 180 | fi |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | ||
| 191 | 187 | class·install_aide·{ | |
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 646, 39 lines modified | Offset 646, 14 lines modified | ||
| 646 | ············_\x8i_\x8s_\x8m······1446 | 646 | ············_\x8i_\x8s_\x8m······1446 |
| 647 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 647 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 648 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 648 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 649 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 649 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 650 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 650 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 651 | ············_\x8c_\x8i_\x8s······1.6.1 | 651 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 652 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 652 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 350118/356619 bytes (98.18%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15178, 234 lines modified | Offset 15178, 234 lines modified | ||
| 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b490:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | 0003b4a0:·2223·6964·6d37·3237·3322·2074·6162·696e··"#idm7273"·tabin | ||
| 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b4b0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b4c0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b4d0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b4e0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b4f0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b500:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b500:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b510:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b520:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b530:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b540:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b550:·2269·646d·3732·3733·223e·3c74·6162·6c65··"idm7273"><table | |||
| 0003b560:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b570:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b580:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b590:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b5 | 0003b510:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b520:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b530:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b540:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b550:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b560:·3733·223e·3c70·7265·3e3c·636f·6465·3e0a··73"><pre><code>. | |||
| 0003b570:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b580:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b590:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b5a0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b5b0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b5c0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b5d0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b5e0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003b5f0:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 0003b600:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b610:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b620:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b630:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b640:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b650:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b660:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b670:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b680:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b690:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b6a0:·3237·3422·3e3c·7461·626c·6520·636c·6173··274"><table·clas | |||
| 0003b6b0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b6c0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b6d0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b6e0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b6f0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b700:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b710:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003b720:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003b730:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003b740:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003b750:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b760:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b770:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b780:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b790:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003b7a0:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003b7b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b7c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b7d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b7e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b7f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b800:·743d·2223·6964·6d37·3237·3522·2074·6162··t="#idm7275"·tab | |||
| 0003b810:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b820:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b830:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b840:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b850:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b860:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003b870:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003b880:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b890:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b8a0:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b8b0:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 0003b8c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b8d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b8e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b8f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b900:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003b910:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003b920:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b930:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b940:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b950:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b960:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b970:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b980:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b990:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b9a0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003b9b0:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003b9c0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b9d0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b9e0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b9f0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba10:·743d·2223·6964·6d37·3237·3622·2074·6162··t="#idm7276"·tab | |||
| 0003ba20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ba30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ba40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ba50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ba60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ba70:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003ba80:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003ba90:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003baa0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bab0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bac0:·643d·2269·646d·3732·3736·223e·3c74·6162··d="idm7276"><tab | |||
| 0003bad0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bae0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| Max diff block lines reached; 3980358/4012428 bytes (99.20%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 33 lines modified | ||
| 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 146 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 147 | ··package: |
| Offset 139, 38 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 173, 26 lines modified | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | 173 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 179 | ····dnf·install·-y·"aide" | 174 | ····dnf·install·-y·"aide" |
| 180 | fi | 175 | fi |
| 181 | else | 176 | else |
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 183 | fi | 178 | fi |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 189 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 644, 39 lines modified | Offset 644, 14 lines modified | ||
| 644 | ············_\x8i_\x8s_\x8m······1446 | 644 | ············_\x8i_\x8s_\x8m······1446 |
| 645 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 645 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 646 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 646 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 647 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 647 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 648 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 648 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 649 | ············_\x8c_\x8i_\x8s······1.6.1 | 649 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 650 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 650 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 651 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 652 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 653 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 654 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 320229/326740 bytes (98.01%) of diff not shown. | |||
| Offset 14408, 15 lines modified | Offset 14408, 15 lines modified | ||
| 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038470:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038480:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038490:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384a0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000384b0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000384c0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000384d0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000384e0:·3 | 000384e0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000384f0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038500:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038510:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038520:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038530:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038540:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038550:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15210, 234 lines modified | Offset 15210, 234 lines modified | ||
| 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b690:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 0003b6a0:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b6b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b6c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b6d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b6e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b6f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b700:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b710:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b720:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b730:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b740:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b750:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 0003b760:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b770:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b780:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b790:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b7a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b7b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b7c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b7d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b7e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b7f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b800:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b810:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b820:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b830:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b840:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b850:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b860:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b870:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b880:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b890:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b8a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b8b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b8c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b8d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b8e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b8f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b900:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b910:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b920:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b930:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b940:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b950:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b960:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b970:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b980:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b990:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b9a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b9b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b9c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b9d0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b9e0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b9f0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba20:·743d·2223·6964·6d37·3237·3422·2074·6162··t="#idm7274"·tab | |||
| 0003ba30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ba40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ba50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ba60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ba70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ba80:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003ba90:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003baa0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bab0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bac0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bad0:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 0003bae0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003baf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bb00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bb10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bb20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bb30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bb40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bb50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bb60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bb70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bb80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bb90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bba0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bbb0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bbc0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bbd0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003bbe0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003bbf0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003bc00:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bc10:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bc20:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bc30:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003bc40:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bc50:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bc60:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bc70:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003bc80:·7461·7267·6574·3d22·2369·646d·3732·3735··target="#idm7275 | |||
| 0003bc90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bca0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bcb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bcc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bcd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bce0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b700:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b | 0003b710:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 0003b | 0003b720:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b730:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b740:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b750:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | ||
| 0003bd50:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003bd60:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003bd70:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| Max diff block lines reached; 7338240/7370310 bytes (99.56%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | ··············Workstation | 58 | ··············Workstation |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 60 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:10 | 61 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 62 | ····*·cpe:/o:centos:centos:10 | 62 | ····*·cpe:/o:centos:centos:10 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 123, 14 lines modified | Offset 123, 33 lines modified | ||
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8c_\x8i_\x8s············6.1.1 | 128 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·--add=aide | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | package·install·aide | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 151 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 152 | ··package: |
| Offset 144, 38 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | include·install_aide | ||
| 157 | class·install_aide·{ | ||
| 158 | ··package·{·'aide': | ||
| 159 | ····ensure·=>·'installed', | ||
| 160 | ··} | ||
| 161 | } | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 178, 26 lines modified | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | 178 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 184 | ····dnf·install·-y·"aide" | 179 | ····dnf·install·-y·"aide" |
| 185 | fi | 180 | fi |
| 186 | else | 181 | else |
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 188 | fi | 183 | fi |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | ||
| 194 | 190 | class·install_aide·{ | |
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 200 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 201 | $·sudo·/usr/sbin/aide·--check |
| Offset 649, 39 lines modified | Offset 649, 14 lines modified | ||
| 649 | ············_\x8i_\x8s_\x8m······1446 | 649 | ············_\x8i_\x8s_\x8m······1446 |
| 650 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 650 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 651 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 651 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 652 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 652 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 653 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 653 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 654 | ············_\x8c_\x8i_\x8s······1.6.1 | 654 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 655 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 655 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 656 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 657 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 658 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 659 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 476418/482929 bytes (98.65%) of diff not shown. | |||
| Offset 14419, 16 lines modified | Offset 14419, 16 lines modified | ||
| 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038520:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038530:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038540:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038550:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038560:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038570:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·2020·2020·2028·6173·206f·6620·3230·323 | 00038590:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 000385a0:·2d30·3 | 000385a0:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 000385b0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 000385c0:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000385d0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385e0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385f0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038600:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038610:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16627, 240 lines modified | Offset 16627, 240 lines modified | ||
| 00040f20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040f20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040f30:·3d22·2369·646d·3739·3435·2220·7461·6269··="#idm7945"·tabi | 00040f30:·3d22·2369·646d·3739·3435·2220·7461·6269··="#idm7945"·tabi | ||
| 00040f40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00040f40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00040f50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00040f50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00040f60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00040f60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00040f70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00040f70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00040f80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00040f80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00040f90:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00040f90:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 00040fa0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00040fb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040fc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040fd0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040fe0:·3d22·6964·6d37·3934·3522·3e3c·7461·626c··="idm7945"><tabl | |||
| 00040ff0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00041000:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00041010:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00041020:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00041030:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040fa0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00040fb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040fc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040fd0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040fe0:·2069·643d·2269·646d·3739·3435·223e·3c74···id="idm7945"><t | |||
| 00040ff0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00041000:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00041010:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00041020:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00041030:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00041040:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00041050:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00041060:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000410 | 00041040:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 00041080:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000410 | 00041050:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 00041060:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00041070:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041080:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00041090:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 000410a0:· | 000410a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 000410b0:· | 000410b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 000410c0:· | 000410c0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 000410d0:· | 000410d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 000410e0:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 000410f0:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 00041100:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 00041110:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 00041120:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 00041130:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 00041140:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 00041150:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 00041160:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 00041170:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 00041180:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 00041190:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 000411a0:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 000411b0:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 000411c0:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 000411d0:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 000411e0:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 000411f0:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 00041200:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 00041210:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 00041220:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 00041230:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 00041240:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 00041250:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 00041260:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00041270:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 00041280:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 00041290:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 000412a0:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 000412b0:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 000412c0:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 000412d0:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 000412e0:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 000412f0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041300:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041310:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041320:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041330:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041340:·2369·646d·3739·3436·2220·7461·6269·6e64··#idm7946"·tabind | |||
| 00041350:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041360:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041370:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041380:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00041390:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 000413a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 000413b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 000413c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000413d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000413e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000413f0:·6964·6d37·3934·3622·3e3c·7461·626c·6520··idm7946"><table· | |||
| 00041400:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00041410:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00041420:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00041430:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00041440:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00041450:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00041460:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00041470:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00041480:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00041490:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000414a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 000414b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000414c0:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 000414d0:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 000414e0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00041 | 000410e0:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | ||
| 00041 | 000410f0:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 00041 | 00041100:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| Max diff block lines reached; 2575656/2608692 bytes (98.73%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:10 | 63 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 64 | ····*·cpe:/o:centos:centos:10 | 64 | ····*·cpe:/o:centos:centos:10 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 430, 39 lines modified | Offset 430, 14 lines modified | ||
| 430 | ············_\x8i_\x8s_\x8m······1446 | 430 | ············_\x8i_\x8s_\x8m······1446 |
| 431 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 431 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 432 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 432 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 433 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 433 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 435 | ············_\x8c_\x8i_\x8s······1.6.1 | 435 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 436 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 436 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 442 | --- | ||
| 443 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 444 | kind:·MachineConfig | ||
| 445 | spec: | ||
| 446 | ··config: | ||
| 447 | ····ignition: | ||
| 448 | ······version:·3.1.0 | ||
| 449 | ····systemd: | ||
| 450 | ······units: | ||
| 451 | ········-·name:·configure-crypto-policy.service | ||
| 452 | ··········enabled:·true | ||
| 453 | ··········contents:·| | ||
| 454 | ············[Unit] | ||
| 455 | ············Before=kubelet.service | ||
| 456 | ············[Service] | ||
| 457 | ············Type=oneshot | ||
| 458 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 459 | ············RemainAfterExit=yes | ||
| 460 | ············[Install] | ||
| 461 | ············WantedBy=multi-user.target | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 467 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 442 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 468 | ··set_fact: | 443 | ··set_fact: |
| Offset 524, 14 lines modified | Offset 499, 39 lines modified | ||
| 524 | » echo·"to·see·what·package·to·(re)install"·>&2 | 499 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 525 | » false··#·end·with·an·error·code | 500 | » false··#·end·with·an·error·code |
| 526 | elif·test·"$rc"·!=·0;·then | 501 | elif·test·"$rc"·!=·0;·then |
| 527 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 502 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 528 | » false··#·end·with·an·error·code | 503 | » false··#·end·with·an·error·code |
| 529 | fi | 504 | fi |
| 505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 510 | --- | ||
| 511 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 512 | kind:·MachineConfig | ||
| 513 | spec: | ||
| 514 | ··config: | ||
| 515 | ····ignition: | ||
| 516 | ······version:·3.1.0 | ||
| 517 | ····systemd: | ||
| 518 | ······units: | ||
| 519 | ········-·name:·configure-crypto-policy.service | ||
| 520 | ··········enabled:·true | ||
| 521 | ··········contents:·| | ||
| 522 | ············[Unit] | ||
| 523 | ············Before=kubelet.service | ||
| 524 | ············[Service] | ||
| 525 | ············Type=oneshot | ||
| 526 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 527 | ············RemainAfterExit=yes | ||
| 528 | ············[Install] | ||
| 529 | ············WantedBy=multi-user.target | ||
| 530 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 530 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 531 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 531 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 532 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 532 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 533 | Severity: ··medium | 533 | Severity: ··medium |
| 534 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 534 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 535 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 535 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 536 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 536 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 856, 14 lines modified | Offset 856, 33 lines modified | ||
| 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 856 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 857 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 858 | The·rear·package·can·be·installed·with·the·following·command: | 858 | The·rear·package·can·be·installed·with·the·following·command: |
| 859 | $·sudo·dnf·install·rear | 859 | $·sudo·dnf·install·rear |
| 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 860 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 861 | Severity: ·medium | 861 | Severity: ·medium |
| 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 862 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 864 | [[packages]] | ||
| 865 | name·=·"rear" | ||
| 866 | version·=·"*" | ||
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 872 | package·--add=rear | ||
| 873 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 874 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 875 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 876 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 877 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 878 | package·install·rear | ||
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 864 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 880 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 865 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 881 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 866 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 882 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 867 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 883 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 154872/161191 bytes (96.08%) of diff not shown. | |||
| Offset 14439, 15 lines modified | Offset 14439, 15 lines modified | ||
| 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038660:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038670:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038680:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038690:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000386a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000386b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000386c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000386d0:·7320·6f66·2032·3032·3 | 000386d0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000386e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000386f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038700:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038710:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038720:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038730:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038740:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16693, 237 lines modified | Offset 16693, 237 lines modified | ||
| 00041340:·6172·6765·743d·2223·6964·6d37·3934·3522··arget="#idm7945" | 00041340:·6172·6765·743d·2223·6964·6d37·3934·3522··arget="#idm7945" | ||
| 00041350:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 00041350:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 00041360:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 00041360:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 00041370:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 00041370:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 00041380:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 00041380:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 00041390:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 00041390:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 000413a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 000413a0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 000413b0:·6f6e·204b·7562·6572·6e65·7465·7320·736e··on·Kubernetes·sn | |||
| 000413c0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000413d0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000413e0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000413f0:·6170·7365·2220·6964·3d22·6964·6d37·3934··apse"·id="idm794 | |||
| 00041400:·3522·3e3c·7461·626c·6520·636c·6173·733d··5"><table·class= | |||
| 00041410:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041420:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041430:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00041440:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041450:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041460:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041470:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041480:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000414a0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e74··eboot:</th><td>t | |||
| 000414b0:·7275·653c·2f74·643e·3c2f·7472·3e3c·7472··rue</td></tr><tr | |||
| 000414c0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 000414d0:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 000414e0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 000414f0:·3e3c·7072·653e·3c63·6f64·653e·2d2d·2d0a··><pre><code>---. | |||
| 00041500:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00041510:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00041520:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00041530:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00041540:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00041550:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| 00041560:·6e3a·0a20·2020·2020·2076·6572·7369·6f6e··n:.······version | |||
| 00041570:·3a20·332e·312e·300a·2020·2020·7379·7374··:·3.1.0.····syst | |||
| 00041580:·656d·643a·0a20·2020·2020·2075·6e69·7473··emd:.······units | |||
| 00041590:·3a0a·2020·2020·2020·2020·2d20·6e61·6d65··:.········-·name | |||
| 000415a0:·3a20·636f·6e66·6967·7572·652d·6372·7970··:·configure-cryp | |||
| 000415b0:·746f·2d70·6f6c·6963·792e·7365·7276·6963··to-policy.servic | |||
| 000415c0:·650a·2020·2020·2020·2020·2020·656e·6162··e.··········enab | |||
| 000415d0:·6c65·643a·2074·7275·650a·2020·2020·2020··led:·true.······ | |||
| 000415e0:·2020·2020·636f·6e74·656e·7473·3a20·7c0a······contents:·|. | |||
| 000415f0:·2020·2020·2020·2020·2020·2020·5b55·6e69··············[Uni | |||
| 00041600:·745d·0a20·2020·2020·2020·2020·2020·2042··t].············B | |||
| 00041610:·6566·6f72·653d·6b75·6265·6c65·742e·7365··efore=kubelet.se | |||
| 00041620:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 00041630:·2020·5b53·6572·7669·6365·5d0a·2020·2020····[Service].···· | |||
| 00041640:·2020·2020·2020·2020·5479·7065·3d6f·6e65··········Type=one | |||
| 00041650:·7368·6f74·0a20·2020·2020·2020·2020·2020··shot.··········· | |||
| 00041660:·2045·7865·6353·7461·7274·3d75·7064·6174···ExecStart=updat | |||
| 00041670:·652d·6372·7970·746f·2d70·6f6c·6963·6965··e-crypto-policie | |||
| 00041680:·7320·2d2d·7365·7420·7b7b·2e76·6172·5f73··s·--set·{{.var_s | |||
| 00041690:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | |||
| 000416a0:·6963·797d·7d0a·2020·2020·2020·2020·2020··icy}}.·········· | |||
| 000416b0:·2020·5265·6d61·696e·4166·7465·7245·7869····RemainAfterExi | |||
| 000416c0:·743d·7965·730a·2020·2020·2020·2020·2020··t=yes.·········· | |||
| 000416d0:·2020·5b49·6e73·7461·6c6c·5d0a·2020·2020····[Install].···· | |||
| 000416e0:·2020·2020·2020·2020·5761·6e74·6564·4279··········WantedBy | |||
| 000416f0:·3d6d·756c·7469·2d75·7365·722e·7461·7267··=multi-user.targ | |||
| 00041700:·6574·0a3c·2f63·6f64·653e·3c2f·7072·653e··et.</code></pre> | |||
| 00041710:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00041720:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00041730:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00041740:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00041750:·6765·743d·2223·6964·6d37·3934·3622·2074··get="#idm7946"·t | |||
| 00041760:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00041770:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00041780:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00041790:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 000417a0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 000417b0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00041 | 000413b0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | ||
| 00041 | 000413c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00041 | 000413d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00041 | 000413e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00041 | 000413f0:·6522·2069·643d·2269·646d·3739·3435·223e··e"·id="idm7945"> | ||
| 00041 | 00041400:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 00041 | 00041410:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 00041 | 00041420:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 00041 | 00041430:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 00041 | 00041440:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 00041 | 00041450:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00041 | 00041460:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00041 | 00041470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00041 | 00041480:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00041 | 00041490:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 00041 | 000414a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 00041 | 000414b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 00041 | 000414c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 00041 | 000414d0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 00041 | 000414e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 00041 | 000414f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 00041 | 00041500:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | ||
| 00041 | 00041510:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 00041 | 00041520:·706f·6c69·6379·2023·2070·726f·6d6f·7465··policy·#·promote | ||
| 00041 | 00041530:·2074·6f20·7661·7269·6162·6c65·0a20·2073···to·variable.··s | ||
| 00041 | 00041540:·6574·5f66·6163·743a·0a20·2020·2076·6172··et_fact:.····var | ||
| 00041 | 00041550:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 00041 | 00041560:·6f6c·6963·793a·2021·2173·7472·203c·6162··olicy:·!!str·<ab | ||
| 00041 | 00041570:·6272·2074·6974·6c65·3d22·6672·6f6d·2042··br·title="from·B | ||
| 00041 | 00041580:·656e·6368·6d61·726b·2f56·616c·7565·3a20··enchmark/Value:· | ||
| 00041 | 00041590:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00041 | 000415a0:·6a65·6374·2e63·6f6e·7465·6e74·5f76·616c··ject.content_val | ||
| 00041 | 000415b0:·7565·5f76·6172·5f73·7973·7465·6d5f·6372··ue_var_system_cr | ||
| 00041 | 000415c0:·7970·746f·5f70·6f6c·6963·7922·3e44·4546··ypto_policy">DEF | ||
| 00041 | 000415d0:·4155·4c54·3c2f·6162·6272·3e0a·2020·7461··AULT</abbr>.··ta | ||
| 00041 | 000415e0:·6773·3a0a·2020·2020·2d20·616c·7761·7973··gs:.····-·always | ||
| 00041 | 000415f0:·0a0a·2d20·6e61·6d65·3a20·436f·6e66·6967··..-·name:·Config | ||
| 00041 | 00041600:·7572·6520·5379·7374·656d·2043·7279·7074··ure·System·Crypt | ||
| 00041 | 00041610:·6f67·7261·7068·7920·506f·6c69·6379·0a20··ography·Policy.· | ||
| Max diff block lines reached; 3958632/3991116 bytes (99.19%) of diff not shown. | |||
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ··············(HIPAA) | 66 | ··············(HIPAA) |
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 68 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 69 | ····*·cpe:/o:redhat:enterprise_linux:10 | 69 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 70 | ····*·cpe:/o:centos:centos:10 | 70 | ····*·cpe:/o:centos:centos:10 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 76 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 78 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 79 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 80 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 445, 39 lines modified | Offset 445, 14 lines modified | ||
| 445 | ············_\x8i_\x8s_\x8m······1446 | 445 | ············_\x8i_\x8s_\x8m······1446 |
| 446 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 446 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 447 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 447 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 448 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 448 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 449 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 449 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 450 | ············_\x8c_\x8i_\x8s······1.6.1 | 450 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 451 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 451 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 457 | --- | ||
| 458 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 459 | kind:·MachineConfig | ||
| 460 | spec: | ||
| 461 | ··config: | ||
| 462 | ····ignition: | ||
| 463 | ······version:·3.1.0 | ||
| 464 | ····systemd: | ||
| 465 | ······units: | ||
| 466 | ········-·name:·configure-crypto-policy.service | ||
| 467 | ··········enabled:·true | ||
| 468 | ··········contents:·| | ||
| 469 | ············[Unit] | ||
| 470 | ············Before=kubelet.service | ||
| 471 | ············[Service] | ||
| 472 | ············Type=oneshot | ||
| 473 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 474 | ············RemainAfterExit=yes | ||
| 475 | ············[Install] | ||
| 476 | ············WantedBy=multi-user.target | ||
| 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 482 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 457 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 483 | ··set_fact: | 458 | ··set_fact: |
| Offset 539, 14 lines modified | Offset 514, 39 lines modified | ||
| 539 | » echo·"to·see·what·package·to·(re)install"·>&2 | 514 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 540 | » false··#·end·with·an·error·code | 515 | » false··#·end·with·an·error·code |
| 541 | elif·test·"$rc"·!=·0;·then | 516 | elif·test·"$rc"·!=·0;·then |
| 542 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 517 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 543 | » false··#·end·with·an·error·code | 518 | » false··#·end·with·an·error·code |
| 544 | fi | 519 | fi |
| 520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 525 | --- | ||
| 526 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 527 | kind:·MachineConfig | ||
| 528 | spec: | ||
| 529 | ··config: | ||
| 530 | ····ignition: | ||
| 531 | ······version:·3.1.0 | ||
| 532 | ····systemd: | ||
| 533 | ······units: | ||
| 534 | ········-·name:·configure-crypto-policy.service | ||
| 535 | ··········enabled:·true | ||
| 536 | ··········contents:·| | ||
| 537 | ············[Unit] | ||
| 538 | ············Before=kubelet.service | ||
| 539 | ············[Service] | ||
| 540 | ············Type=oneshot | ||
| 541 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 542 | ············RemainAfterExit=yes | ||
| 543 | ············[Install] | ||
| 544 | ············WantedBy=multi-user.target | ||
| 545 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 545 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 546 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 546 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 547 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 547 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 548 | Severity: ··medium | 548 | Severity: ··medium |
| 549 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 549 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 550 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 550 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 551 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 551 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 639, 24 lines modified | Offset 639, 24 lines modified | ||
| 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 639 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 | 640 | ············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 641 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 642 | [[customizations.filesystem]] | 642 | [[customizations.filesystem]] |
| 643 | mountpoint·=·"/var/log/audit" | 643 | mountpoint·=·"/var/log/audit" |
| 644 | size·=·10737418240 | 644 | size·=·10737418240 |
| 645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 646 | logvol·/var/log/audit·10240 | ||
| 647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 652 | part·/var/log/audit | 650 | part·/var/log/audit |
| 651 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 652 | logvol·/var/log/audit·10240 | ||
| 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 653 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 654 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 655 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| 656 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. | 656 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. |
| 657 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules | 657 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules |
| Offset 1535, 33 lines modified | Offset 1535, 25 lines modified | ||
| 1535 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1535 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1536 | ············_\x8c_\x8u_\x8i····3.4.5 | 1536 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1537 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1537 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| Max diff block lines reached; 223375/229977 bytes (97.13%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000385a0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 000385b0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 000385c0:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000385d0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000385e0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000385f0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038600:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038610:·7320·6f66·2032·3032·3 | 00038610:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038620:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038630:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038640:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038650:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038660:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038670:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038680:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 16549, 234 lines modified | Offset 16549, 234 lines modified | ||
| 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 00040a40:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | 00040a50:·3237·3322·2074·6162·696e·6465·783d·2230··273"·tabindex="0 | ||
| 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00040a60:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00040a70:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00040a80:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00040a90:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00040aa0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00040ab0:·6961·7469·6f6e·204 | 00040ab0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00040ac0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040ad0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040ae0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040af0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 00040b00:·3733·223e·3c74·6162·6c65·2063·6c61·7373··73"><table·class | |||
| 00040b10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040b20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040b30:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040b40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040 | 00040ac0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 00040ad0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040ae0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040af0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040b00:·2069·643d·2269·646d·3732·3733·223e·3c70···id="idm7273"><p | |||
| 00040b10:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 00040b20:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 00040b30:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 00040b40:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 00040b50:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040b60:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040b70:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040b80:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040b90:·6765·743d·2223·6964·6d37·3237·3422·2074··get="#idm7274"·t | |||
| 00040ba0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040bb0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040bc0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040bd0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040be0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040bf0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040c00:·2041·6e61·636f·6e64·6120·736e·6970·7065···Anaconda·snippe | |||
| 00040c10:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040c20:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040c30:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040c40:·2220·6964·3d22·6964·6d37·3237·3422·3e3c··"·id="idm7274">< | |||
| 00040c50:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040c60:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040c70:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040c80:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00040c90:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00040ca0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00040cb0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040cc0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040 | 00040cd0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 00040 | 00040ce0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 00040cf0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00040d00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040d10:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040d20:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040d30:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040d40:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 00040d50:·2d2d·6164·643d·6169·6465·0a3c·2f63·6f64··--add=aide.</cod | |||
| 00040d60:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040d70:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040d80:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040d90:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040da0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040db0:·6d37·3237·3522·2074·6162·696e·6465·783d··m7275"·tabindex= | |||
| 00040dc0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040dd0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040de0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040df0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040e00:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040e10:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | |||
| 00040e20:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040e30:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040e40:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040e50:·6964·3d22·6964·6d37·3237·3522·3e3c·7461··id="idm7275"><ta | |||
| 00040e60:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040e70:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040e80:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040e90:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040ea0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040 | 00040eb0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 00040 | 00040ec0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00040ed0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00040ee0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040ef0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00040f00:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00040f10:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040f20:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00040f30:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00040f40:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00040f50:·636f·6465·3e0a·7061·636b·6167·6520·696e··code>.package·in | |||
| 00040f60:·7374·616c·6c20·6169·6465·0a3c·2f63·6f64··stall·aide.</cod | |||
| 00040f70:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040f80:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040f90:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040fa0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040fb0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040fc0:·6d37·3237·3622·2074·6162·696e·6465·783d··m7276"·tabindex= | |||
| 00040fd0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040fe0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040ff0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00041000:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00041010:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00041020:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 00041030:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00041040:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041050:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041060:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041070:·3732·3736·223e·3c74·6162·6c65·2063·6c61··7276"><table·cla | |||
| 00041080:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041090:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| Max diff block lines reached; 3681526/3713596 bytes (99.14%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Base | 63 | ··············Base |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 14 lines modified | Offset 436, 33 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·--add=aide | ||
| 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 458 | package·install·aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | -·name:·Ensure·aide·is·installed | 464 | -·name:·Ensure·aide·is·installed |
| 449 | ··package: | 465 | ··package: |
| Offset 457, 38 lines modified | Offset 476, 14 lines modified | ||
| 457 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 458 | ··-·enable_strategy | 477 | ··-·enable_strategy |
| 459 | ··-·low_complexity | 478 | ··-·low_complexity |
| 460 | ··-·low_disruption | 479 | ··-·low_disruption |
| 461 | ··-·medium_severity | 480 | ··-·medium_severity |
| 462 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 463 | ··-·package_aide_installed | 482 | ··-·package_aide_installed |
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 469 | include·install_aide | ||
| 470 | class·install_aide·{ | ||
| 471 | ··package·{·'aide': | ||
| 472 | ····ensure·=>·'installed', | ||
| 473 | ··} | ||
| 474 | } | ||
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 476 | [[packages]] | ||
| 477 | name·=·"aide" | ||
| 478 | version·=·"*" | ||
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 480 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 481 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 482 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 483 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 484 | package·install·aide | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 490 | #·Remediation·is·applicable·only·in·certain·platforms | 488 | #·Remediation·is·applicable·only·in·certain·platforms |
| 491 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 489 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 496, 21 lines modified | Offset 491, 26 lines modified | ||
| 496 | if·!·rpm·-q·--quiet·"aide"·;·then | 491 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 497 | ····dnf·install·-y·"aide" | 492 | ····dnf·install·-y·"aide" |
| 498 | fi | 493 | fi |
| 499 | else | 494 | else |
| 500 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 495 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 501 | fi | 496 | fi |
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 502 | include·install_aide | ||
| 507 | 503 | class·install_aide·{ | |
| 504 | ··package·{·'aide': | ||
| 505 | ····ensure·=>·'installed', | ||
| 506 | ··} | ||
| 507 | } | ||
| 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| Max diff block lines reached; 251219/257511 bytes (97.56%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000385e0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000385f0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038600:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038610:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038620:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038630:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038640:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038650:·206f·6620·3230·323 | 00038650:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038660:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038670:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038680:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038690:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000386a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000386b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000386c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16553, 234 lines modified | Offset 16553, 234 lines modified | ||
| 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040a80:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | 00040a90:·3733·2220·7461·6269·6e64·6578·3d22·3022··73"·tabindex="0" | ||
| 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040aa0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040ab0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00040ac0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00040ad0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00040ae0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00040af0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 00040af0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 00040b00:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040b10:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040b20:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040b30:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 00040b40:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00040b50:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040b60:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040b70:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040b80:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040b90:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040ba0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040bb0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040bc0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040bd0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040be0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040bf0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040c00:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040c10:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040c20:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040c30:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00040c40:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00040c50:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00040c60:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00040c70:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00040c80:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00040c90:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00040ca0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 00040cb0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00040cc0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00040cd0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00040ce0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 00040cf0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 00040d00:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040d10:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00040d20:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00040d30:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00040d40:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040d50:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040d60:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040d70:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040d80:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040d90:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040da0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00040db0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 00040dc0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00040dd0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00040de0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00040df0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00040e00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040e10:·743d·2223·6964·6d37·3237·3422·2074·6162··t="#idm7274"·tab | |||
| 00040e20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00040e30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00040e40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040e50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040e60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040e70:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00040 | 00040b00:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 00040 | 00040b10:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00040 | 00040b20:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00040 | 00040b30:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00040ec0:·3d22·6964·6d37·3237·3422·3e3c·7461·626c··="idm7274"><tabl | |||
| 00040ed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040ee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040ef0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040f00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040f10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040f20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040f30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040f40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040f50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040f60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040f70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040f80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040f90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040fa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040fb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040fc0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 00040fd0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 00040fe0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 00040ff0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 00041000:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 00041010:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 00041020:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 00041030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00041040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00041050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00041060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041070:·7461·7267·6574·3d22·2369·646d·3732·3735··target="#idm7275 | |||
| 00041080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 000410a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 000410b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 000410c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 000410d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 000410e0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 000410f0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00041100:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00041110:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00041120:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0004 | 00040b40:·6964·3d22·6964·6d37·3237·3322·3e3c·7072··id="idm7273"><pr | ||
| 0004 | 00040b50:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0004 | 00040b60:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | ||
| Max diff block lines reached; 3681457/3713527 bytes (99.14%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ··············Secret | 64 | ··············Secret |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:10 | 67 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 68 | ····*·cpe:/o:centos:centos:10 | 68 | ····*·cpe:/o:centos:centos:10 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 78 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 437, 14 lines modified | Offset 437, 33 lines modified | ||
| 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 437 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 438 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 440 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 441 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 442 | ············_\x8c_\x8i_\x8s············6.1.1 | 442 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 443 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | [[packages]] | ||
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 453 | package·--add=aide | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·install·aide | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 449 | -·name:·Ensure·aide·is·installed | 465 | -·name:·Ensure·aide·is·installed |
| 450 | ··package: | 466 | ··package: |
| Offset 458, 38 lines modified | Offset 477, 14 lines modified | ||
| 458 | ··-·PCI-DSSv4-11.5.2 | 477 | ··-·PCI-DSSv4-11.5.2 |
| 459 | ··-·enable_strategy | 478 | ··-·enable_strategy |
| 460 | ··-·low_complexity | 479 | ··-·low_complexity |
| 461 | ··-·low_disruption | 480 | ··-·low_disruption |
| 462 | ··-·medium_severity | 481 | ··-·medium_severity |
| 463 | ··-·no_reboot_needed | 482 | ··-·no_reboot_needed |
| 464 | ··-·package_aide_installed | 483 | ··-·package_aide_installed |
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 470 | include·install_aide | ||
| 471 | class·install_aide·{ | ||
| 472 | ··package·{·'aide': | ||
| 473 | ····ensure·=>·'installed', | ||
| 474 | ··} | ||
| 475 | } | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 477 | [[packages]] | ||
| 478 | name·=·"aide" | ||
| 479 | version·=·"*" | ||
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 485 | package·install·aide | ||
| 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 484 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 485 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 486 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 487 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 488 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 491 | #·Remediation·is·applicable·only·in·certain·platforms | 489 | #·Remediation·is·applicable·only·in·certain·platforms |
| 492 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 490 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 497, 21 lines modified | Offset 492, 26 lines modified | ||
| 497 | if·!·rpm·-q·--quiet·"aide"·;·then | 492 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 498 | ····dnf·install·-y·"aide" | 493 | ····dnf·install·-y·"aide" |
| 499 | fi | 494 | fi |
| 500 | else | 495 | else |
| 501 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 496 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 502 | fi | 497 | fi |
| 503 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 498 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 504 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 499 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 505 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 500 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 506 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 501 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 507 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 502 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 503 | include·install_aide | ||
| 508 | 504 | class·install_aide·{ | |
| 505 | ··package·{·'aide': | ||
| 506 | ····ensure·=>·'installed', | ||
| 507 | ··} | ||
| 508 | } | ||
| 509 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 509 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 510 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 510 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 511 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 511 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 512 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 512 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 513 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 513 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 623, 14 lines modified | Offset 623, 18 lines modified | ||
| 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 623 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 624 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 625 | ············_\x8i_\x8s_\x8m······1446 | 625 | ············_\x8i_\x8s_\x8m······1446 |
| 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 626 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 627 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 628 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 629 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 631 | [customizations] | ||
| 632 | fips·=·true | ||
| Max diff block lines reached; 251219/257520 bytes (97.55%) of diff not shown. | |||
| Offset 14428, 16 lines modified | Offset 14428, 16 lines modified | ||
| 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000385b0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000385c0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 000385d0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000385e0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000385f0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038600:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038610:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038620:·2020·2020·2028·6173·206f·6620·3230·323 | 00038620:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038630:·2d30·3 | 00038630:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038640:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038650:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038660:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038670:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038680:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038690:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000386a0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16550, 234 lines modified | Offset 16550, 234 lines modified | ||
| 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040a50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | 00040a60:·3d22·2369·646d·3732·3733·2220·7461·6269··="#idm7273"·tabi | ||
| 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00040a70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00040a80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00040a90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00040aa0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00040ab0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00040ac0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040ad0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00040ad0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00040ae0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040af0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040b00:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040b10:·3d22·6964·6d37·3237·3322·3e3c·7461·626c··="idm7273"><tabl | |||
| 00040b20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040b30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040b40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040b50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040b60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040b70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040b80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040b90:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040ba0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040bb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040bc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040bd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040be0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040bf0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00040c00:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00040c10:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00040c20:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00040c30:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00040c40:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00040c50:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00040c60:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 00040c70:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 00040c80:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 00040c90:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 00040ca0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 00040cb0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00040cc0:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 00040cd0:·352e·3130·2e31·2e33·0a20·202d·204e·4953··5.10.1.3.··-·NIS | |||
| 00040ce0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 00040cf0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 00040d00:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 00040d10:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 00040d20:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 00040d30:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 00040d40:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 00040d50:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 00040d60:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 00040d70:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 00040d80:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 00040d90:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00040da0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040db0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040dc0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040dd0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040de0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00040df0:·3237·3422·2074·6162·696e·6465·783d·2230··274"·tabindex="0 | |||
| 00040e00:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040e10:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00040e20:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00040e30:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00040e40:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00040e50:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 00040 | 00040ae0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 00040 | 00040af0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 00040 | 00040b00:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 00040 | 00040b10:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | ||
| 00040ea0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 00040eb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040ec0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040ed0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040ee0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040ef0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040f00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040f10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00040f20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040f30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040f40:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00040f50:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040f60:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040f70:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040f80:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040f90:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 00040fa0:·6465·2069·6e73·7461·6c6c·5f61·6964·650a··de·install_aide. | |||
| 00040fb0:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f61··.class·install_a | |||
| 00040fc0:·6964·6520·7b0a·2020·7061·636b·6167·6520··ide·{.··package· | |||
| 00040fd0:·7b20·2761·6964·6527·3a0a·2020·2020·656e··{·'aide':.····en | |||
| 00040fe0:·7375·7265·203d·2667·743b·2027·696e·7374··sure·=>·'inst | |||
| 00040ff0:·616c·6c65·6427·2c0a·2020·7d0a·7d0a·3c2f··alled',.··}.}.</ | |||
| 00041000:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00041010:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00041020:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00041030:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00041040:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00041050:·2369·646d·3732·3735·2220·7461·6269·6e64··#idm7275"·tabind | |||
| 00041060:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00041070:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00041080:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00041090:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 000410a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 000410b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 000410c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 000410d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000410e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000410f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041100:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0004 | 00040b20:·3237·3322·3e3c·7072·653e·3c63·6f64·653e··273"><pre><code> | ||
| Max diff block lines reached; 3681664/3713872 bytes (99.13%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ··············Top·Secret | 63 | ··············Top·Secret |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:10 | 66 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 67 | ····*·cpe:/o:centos:centos:10 | 67 | ····*·cpe:/o:centos:centos:10 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 436, 14 lines modified | Offset 436, 33 lines modified | ||
| 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 436 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 437 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 438 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 439 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ············_\x8c_\x8i_\x8s············6.1.1 | 441 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | [[packages]] | ||
| 445 | name·=·"aide" | ||
| 446 | version·=·"*" | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·--add=aide | ||
| 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 458 | package·install·aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 448 | -·name:·Ensure·aide·is·installed | 464 | -·name:·Ensure·aide·is·installed |
| 449 | ··package: | 465 | ··package: |
| Offset 457, 38 lines modified | Offset 476, 14 lines modified | ||
| 457 | ··-·PCI-DSSv4-11.5.2 | 476 | ··-·PCI-DSSv4-11.5.2 |
| 458 | ··-·enable_strategy | 477 | ··-·enable_strategy |
| 459 | ··-·low_complexity | 478 | ··-·low_complexity |
| 460 | ··-·low_disruption | 479 | ··-·low_disruption |
| 461 | ··-·medium_severity | 480 | ··-·medium_severity |
| 462 | ··-·no_reboot_needed | 481 | ··-·no_reboot_needed |
| 463 | ··-·package_aide_installed | 482 | ··-·package_aide_installed |
| 464 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 465 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 466 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 467 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 468 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 469 | include·install_aide | ||
| 470 | class·install_aide·{ | ||
| 471 | ··package·{·'aide': | ||
| 472 | ····ensure·=>·'installed', | ||
| 473 | ··} | ||
| 474 | } | ||
| 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 476 | [[packages]] | ||
| 477 | name·=·"aide" | ||
| 478 | version·=·"*" | ||
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 480 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 481 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 482 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 483 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 484 | package·install·aide | ||
| 485 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 486 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 487 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 488 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 489 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 490 | #·Remediation·is·applicable·only·in·certain·platforms | 488 | #·Remediation·is·applicable·only·in·certain·platforms |
| 491 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 489 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 496, 21 lines modified | Offset 491, 26 lines modified | ||
| 496 | if·!·rpm·-q·--quiet·"aide"·;·then | 491 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 497 | ····dnf·install·-y·"aide" | 492 | ····dnf·install·-y·"aide" |
| 498 | fi | 493 | fi |
| 499 | else | 494 | else |
| 500 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 495 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 501 | fi | 496 | fi |
| 502 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 503 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 504 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 505 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 506 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 502 | include·install_aide | ||
| 507 | 503 | class·install_aide·{ | |
| 504 | ··package·{·'aide': | ||
| 505 | ····ensure·=>·'installed', | ||
| 506 | ··} | ||
| 507 | } | ||
| 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 508 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 509 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 510 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 511 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 512 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 622 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ············_\x8i_\x8s_\x8m······1446 | 624 | ············_\x8i_\x8s_\x8m······1446 |
| 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| Max diff block lines reached; 251219/257528 bytes (97.55%) of diff not shown. | |||
| Offset 14421, 15 lines modified | Offset 14421, 15 lines modified | ||
| 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038540:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038550:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038560:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038570:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038580:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038590:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385a0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385b0:·3230·323 | 000385b0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 000385c0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000385d0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000385e0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000385f0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038600:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038610:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038620:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16532, 233 lines modified | Offset 16532, 233 lines modified | ||
| 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | 00040930:·6765·743d·2223·6964·6d37·3237·3322·2074··get="#idm7273"·t | ||
| 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00040940:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 00040950:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 00040960:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 00040970:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 00040980:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 00040990:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000409a0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 000409b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 000409c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000409d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000409e0:·2069·643d·2269·646d·3732·3733·223e·3c74···id="idm7273"><t | |||
| 000409f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040a00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040a10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040a20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040 | 000409a0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 000409b0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 000409c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 000409d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 000409e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 000409f0:·646d·3732·3733·223e·3c70·7265·3e3c·636f··dm7273"><pre><co | |||
| 00040a00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 00040a10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 00040a20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 00040a30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00040a40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00040a50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00040a60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00040a70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00040a80:·6964·6d37·3237·3422·2074·6162·696e·6465··idm7274"·tabinde | |||
| 00040a90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00040aa0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00040ab0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00040ac0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00040ad0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00040ae0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 00040af0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 00040b00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040b10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040b20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040b30:·6964·6d37·3237·3422·3e3c·7461·626c·6520··idm7274"><table· | |||
| 00040b40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040b50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00040b60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00040b70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00040b80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00040b90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00040ba0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00040bb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00040bc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00040bd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040be0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040bf0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040 | 00040c00:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 00040a50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040 | 00040c10:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 00040c20:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040c30:·3e0a·7061·636b·6167·6520·2d2d·6164·643d··>.package·--add= | |||
| 00040c40:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 00040c50:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040c60:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040c70:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040c80:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040c90:·6172·6765·743d·2223·6964·6d37·3237·3522··arget="#idm7275" | |||
| 00040ca0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040cb0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040cc0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040cd0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040ce0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040cf0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040d00:·6f6e·2073·6372·6970·7420·e287·b23c·2f61··on·script·...</a | |||
| 00040d10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00040d20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00040d30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00040d40:·6d37·3237·3522·3e3c·7461·626c·6520·636c··m7275"><table·cl | |||
| 00040d50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00040d60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00040d70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040d80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040d90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040 | 00040da0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 00040a80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00040 | 00040db0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 00040dc0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00040 | 00040dd0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00040de0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00040df0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00040e00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00040e10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00040e20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00040e30:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 00040e40:·7061·636b·6167·6520·696e·7374·616c·6c20··package·install· | |||
| 00040e50:·6169·6465·0a3c·2f63·6f64·653e·3c2f·7072··aide.</code></pr | |||
| 00040e60:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040e70:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040e80:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040e90:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040ea0:·6172·6765·743d·2223·6964·6d37·3237·3622··arget="#idm7276" | |||
| 00040eb0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040ec0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040ed0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00040ee0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00040ef0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00040f00:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040f10:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00040f20:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00040f30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00040f40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00040f50:·6522·2069·643d·2269·646d·3732·3736·223e··e"·id="idm7276"> | |||
| 00040f60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| Max diff block lines reached; 4159515/4191447 bytes (99.24%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | ··············Linux·10 | 62 | ··············Linux·10 |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:10 | 65 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 66 | ····*·cpe:/o:centos:centos:10 | 66 | ····*·cpe:/o:centos:centos:10 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 433, 14 lines modified | Offset 433, 33 lines modified | ||
| 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 435 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 437 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 438 | ············_\x8c_\x8i_\x8s············6.1.1 | 438 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 439 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | [[packages]] | ||
| 442 | name·=·"aide" | ||
| 443 | version·=·"*" | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 449 | package·--add=aide | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 455 | package·install·aide | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 445 | -·name:·Ensure·aide·is·installed | 461 | -·name:·Ensure·aide·is·installed |
| 446 | ··package: | 462 | ··package: |
| Offset 454, 38 lines modified | Offset 473, 14 lines modified | ||
| 454 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 455 | ··-·enable_strategy | 474 | ··-·enable_strategy |
| 456 | ··-·low_complexity | 475 | ··-·low_complexity |
| 457 | ··-·low_disruption | 476 | ··-·low_disruption |
| 458 | ··-·medium_severity | 477 | ··-·medium_severity |
| 459 | ··-·no_reboot_needed | 478 | ··-·no_reboot_needed |
| 460 | ··-·package_aide_installed | 479 | ··-·package_aide_installed |
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 466 | include·install_aide | ||
| 467 | class·install_aide·{ | ||
| 468 | ··package·{·'aide': | ||
| 469 | ····ensure·=>·'installed', | ||
| 470 | ··} | ||
| 471 | } | ||
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 473 | [[packages]] | ||
| 474 | name·=·"aide" | ||
| 475 | version·=·"*" | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 481 | package·install·aide | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 487 | #·Remediation·is·applicable·only·in·certain·platforms | 485 | #·Remediation·is·applicable·only·in·certain·platforms |
| 488 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 493, 21 lines modified | Offset 488, 26 lines modified | ||
| 493 | if·!·rpm·-q·--quiet·"aide"·;·then | 488 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 494 | ····dnf·install·-y·"aide" | 489 | ····dnf·install·-y·"aide" |
| 495 | fi | 490 | fi |
| 496 | else | 491 | else |
| 497 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 492 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 498 | fi | 493 | fi |
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 499 | include·install_aide | ||
| 504 | 500 | class·install_aide·{ | |
| 501 | ··package·{·'aide': | ||
| 502 | ····ensure·=>·'installed', | ||
| 503 | ··} | ||
| 504 | } | ||
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 506 | Run·the·following·command·to·generate·a·new·database: | 506 | Run·the·following·command·to·generate·a·new·database: |
| 507 | $·sudo·/usr/sbin/aide·--init | 507 | $·sudo·/usr/sbin/aide·--init |
| 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 510 | To·initiate·a·manual·check,·run·the·following·command: | 510 | To·initiate·a·manual·check,·run·the·following·command: |
| 511 | $·sudo·/usr/sbin/aide·--check | 511 | $·sudo·/usr/sbin/aide·--check |
| Offset 794, 39 lines modified | Offset 794, 14 lines modified | ||
| 794 | ············_\x8i_\x8s_\x8m······1446 | 794 | ············_\x8i_\x8s_\x8m······1446 |
| 795 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 795 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 796 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 796 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 797 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 797 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 798 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 798 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 799 | ············_\x8c_\x8i_\x8s······1.6.1 | 799 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 800 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 800 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 801 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 802 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 803 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 804 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 256318/262815 bytes (97.53%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000384f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038500:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038510:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038520:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038530:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038540:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038550:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038560:·206f·6620·3230·323 | 00038560:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038570:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038580:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038590:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000385a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000385b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000385c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000385d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b6c0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | 0003b6d0:·3732·3733·2220·7461·6269·6e64·6578·3d22··7273"·tabindex=" | ||
| 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b6e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b6f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b700:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b710:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b720:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b730:·6469·6174·696f·6e20·4 | 0003b730:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b740:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b750:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b760:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b770:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b780:·3237·3322·3e3c·7461·626c·6520·636c·6173··273"><table·clas | |||
| 0003b790:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b7a0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b7b0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b7c0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b7 | 0003b740:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b750:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b760:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b770:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b780:·2220·6964·3d22·6964·6d37·3237·3322·3e3c··"·id="idm7273">< | |||
| 0003b790:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b7a0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b7b0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b7c0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b7d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b7e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b7f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b800:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b810:·7267·6574·3d22·2369·646d·3732·3734·2220··rget="#idm7274"· | |||
| 0003b820:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b830:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b840:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b850:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b860:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b870:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b880:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003b890:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b8a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b8b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b8c0:·6522·2069·643d·2269·646d·3732·3734·223e··e"·id="idm7274"> | |||
| 0003b8d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b8e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b8f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b900:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b910:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b920:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b930:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b940:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b7e | 0003b950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b960:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b970:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b980:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b990:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b9a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b9b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b9c0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b9d0:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003b9e0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b9f0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba00:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba10:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ba20:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ba30:·646d·3732·3735·2220·7461·6269·6e64·6578··dm7275"·tabindex | |||
| 0003ba40:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003ba50:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003ba60:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003ba70:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003ba80:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003ba90:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003baa0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003bab0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003bac0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003bad0:·2069·643d·2269·646d·3732·3735·223e·3c74···id="idm7275"><t | |||
| 0003bae0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003baf0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003bb00:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003bb10:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003bb20:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003bb30:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003bb40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b820:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b830:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b | 0003bb50:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 0003bb60:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003bb70:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b | 0003bb80:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0003b860:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b870:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b880:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b890:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b8a0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b8b0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b8c0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b8d0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b8e0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b8f0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b900:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b910:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b920:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b930:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b940:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 0003b950:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b960:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b970:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b980:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b990:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b9a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b9b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b9c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| Max diff block lines reached; 6962531/6994601 bytes (99.54%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 143, 38 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 177, 26 lines modified | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | 177 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 183 | ····dnf·install·-y·"aide" | 178 | ····dnf·install·-y·"aide" |
| 184 | fi | 179 | fi |
| 185 | else | 180 | else |
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 187 | fi | 182 | fi |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | ||
| 193 | 189 | class·install_aide·{ | |
| 190 | ··package·{·'aide': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 197 | Severity: ··medium | 197 | Severity: ··medium |
| 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| Max diff block lines reached; 553901/560504 bytes (98.82%) of diff not shown. | |||
| Offset 14416, 16 lines modified | Offset 14416, 16 lines modified | ||
| 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 000384f0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038500:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038510:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038520:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038530:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038540:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038550:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038560:·2028·6173·206f·6620·3230·323 | 00038560:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00038570:·323 | 00038570:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00038580:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00038590:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000385a0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000385b0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000385c0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000385d0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 000385e0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15213, 234 lines modified | Offset 15213, 234 lines modified | ||
| 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b6c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | 0003b6d0:·2369·646d·3732·3733·2220·7461·6269·6e64··#idm7273"·tabind | ||
| 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b6e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b6f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b700:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b710:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b720:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b730:·5265·6d65·6469·6174·696f·6e20·4 | 0003b730:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b740:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b750:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b760:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b770:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b780:·6964·6d37·3237·3322·3e3c·7461·626c·6520··idm7273"><table· | |||
| 0003b790:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b7a0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b7b0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b7c0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b7 | 0003b740:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b750:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b760:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b770:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b780:·6170·7365·2220·6964·3d22·6964·6d37·3237··apse"·id="idm727 | |||
| 0003b790:·3322·3e3c·7072·653e·3c63·6f64·653e·0a5b··3"><pre><code>.[ | |||
| 0003b7a0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b7b0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b7c0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b7d0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b7e0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b7f0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b800:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b810:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | |||
| 0003b820:·3734·2220·7461·6269·6e64·6578·3d22·3022··74"·tabindex="0" | |||
| 0003b830:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b840:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b850:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b860:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b870:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b880:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b890:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b8a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b8b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b8c0:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b8d0:·3734·223e·3c74·6162·6c65·2063·6c61·7373··74"><table·class | |||
| 0003b8e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b8f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b900:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b910:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b920:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b930:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b940:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b950:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b960:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b970:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b980:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b990:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b9a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b9b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b9c0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b9d0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b9e0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b9f0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ba00:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ba10:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ba20:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ba30:·3d22·2369·646d·3732·3735·2220·7461·6269··="#idm7275"·tabi | |||
| 0003ba40:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003ba50:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003ba60:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003ba70:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ba80:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ba90:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003baa0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bab0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bac0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bad0:·7073·6522·2069·643d·2269·646d·3732·3735··pse"·id="idm7275 | |||
| 0003bae0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003baf0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bb00:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bb10:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bb20:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bb30:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003bb40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b820:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003bb50:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003bb60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b | 0003bb70:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b | 0003bb80:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003b860:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b870:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b880:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b890:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b8a0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b8b0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b8c0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b8d0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b8e0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b8f0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b900:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b910:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b920:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b930:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b940:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | |||
| 0003b950:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b960:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b970:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b980:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b990:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b9a0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b9b0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b9c0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| Max diff block lines reached; 6887468/6919676 bytes (99.53%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:10 | 62 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 63 | ····*·cpe:/o:centos:centos:10 | 63 | ····*·cpe:/o:centos:centos:10 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 122 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 123 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ············_\x8c_\x8i_\x8s············6.1.1 | 127 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 143, 38 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 177, 26 lines modified | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | 177 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 183 | ····dnf·install·-y·"aide" | 178 | ····dnf·install·-y·"aide" |
| 184 | fi | 179 | fi |
| 185 | else | 180 | else |
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 187 | fi | 182 | fi |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | ||
| 193 | 189 | class·install_aide·{ | |
| 190 | ··package·{·'aide': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 195 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 196 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 197 | Severity: ··medium | 197 | Severity: ··medium |
| 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 198 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 199 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 200 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1668, 14 lines modified | Offset 1668, 18 lines modified | ||
| 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1668 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1669 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1670 | ············_\x8i_\x8s_\x8m······1446 | 1670 | ············_\x8i_\x8s_\x8m······1446 |
| 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1671 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1672 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1673 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1675 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1676 | [customizations] | ||
| 1677 | fips·=·true | ||
| Max diff block lines reached; 547085/553692 bytes (98.81%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385d0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385e0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385f0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038600:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038610:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038620:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038630:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038640:·6620·3230·323 | 00038640:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038650:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038660:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038670:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038680:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038690:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386a0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386b0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15182, 236 lines modified | Offset 15182, 236 lines modified | ||
| 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b4d0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b4e0:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b4f0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b500:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b510:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b520:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b530:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b540:·6564·6961·7469·6f6e·204 | 0003b540:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b550:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b560:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b570:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b580:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b590:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b5a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b5b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b5c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b5d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b5 | 0003b550:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b560:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b570:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b580:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b590:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b5a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b5b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b5c0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b5d0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b5e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b5f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b600:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b610:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b620:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 0003b630:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b640:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b650:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b660:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b670:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b680:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b690:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003b6a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b6b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6d0:·7365·2220·6964·3d22·6964·6d38·3432·3922··se"·id="idm8429" | |||
| 0003b6e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b6f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b700:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b710:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b720:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b730:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b740:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b750:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003b760:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003b770:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b780:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b790:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b7a0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b7b0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b7c0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b7d0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003b7e0:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003b7f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b800:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b810:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b820:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b830:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b840:·6964·6d38·3433·3022·2074·6162·696e·6465··idm8430"·tabinde | |||
| 0003b850:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b860:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b870:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b880:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b890:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b8a0:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003b8b0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b8c0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b8d0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b8e0:·2220·6964·3d22·6964·6d38·3433·3022·3e3c··"·id="idm8430">< | |||
| 0003b8f0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b900:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b910:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b920:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b930:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003b940:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003b950:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b630:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b640:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b | 0003b960:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003b970:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b980:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b | 0003b990:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003b670:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b680:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b690:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b6a0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b6b0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b6c0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b6d0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b6e0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b6f0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b700:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b710:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b720:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b730:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b740:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b750:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b760:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003b770:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b780:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b790:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b7a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b7b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b7c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b7d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| Max diff block lines reached; 5508584/5540930 bytes (99.42%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 76 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 77 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ············_\x8c_\x8i_\x8s············6.1.1 | 123 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 141, 38 lines modified | Offset 160, 14 lines modified | ||
| 141 | ··-·PCI-DSSv4-11.5.2 | 160 | ··-·PCI-DSSv4-11.5.2 |
| 142 | ··-·enable_strategy | 161 | ··-·enable_strategy |
| 143 | ··-·low_complexity | 162 | ··-·low_complexity |
| 144 | ··-·low_disruption | 163 | ··-·low_disruption |
| 145 | ··-·medium_severity | 164 | ··-·medium_severity |
| 146 | ··-·no_reboot_needed | 165 | ··-·no_reboot_needed |
| 147 | ··-·package_aide_installed | 166 | ··-·package_aide_installed |
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | include·install_aide | ||
| 154 | class·install_aide·{ | ||
| 155 | ··package·{·'aide': | ||
| 156 | ····ensure·=>·'installed', | ||
| 157 | ··} | ||
| 158 | } | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 168 | package·install·aide | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | #·Remediation·is·applicable·only·in·certain·platforms | 172 | #·Remediation·is·applicable·only·in·certain·platforms |
| 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 180, 21 lines modified | Offset 175, 26 lines modified | ||
| 180 | if·!·rpm·-q·--quiet·"aide"·;·then | 175 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 181 | ····dnf·install·-y·"aide" | 176 | ····dnf·install·-y·"aide" |
| 182 | fi | 177 | fi |
| 183 | else | 178 | else |
| 184 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 185 | fi | 180 | fi |
| 186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 181 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 182 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 183 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 184 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 185 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 186 | include·install_aide | ||
| 191 | 187 | class·install_aide·{ | |
| 188 | ··package·{·'aide': | ||
| 189 | ····ensure·=>·'installed', | ||
| 190 | ··} | ||
| 191 | } | ||
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 193 | Run·the·following·command·to·generate·a·new·database: | 193 | Run·the·following·command·to·generate·a·new·database: |
| 194 | $·sudo·/usr/sbin/aide·--init | 194 | $·sudo·/usr/sbin/aide·--init |
| 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 195 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 196 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 197 | To·initiate·a·manual·check,·run·the·following·command: | 197 | To·initiate·a·manual·check,·run·the·following·command: |
| 198 | $·sudo·/usr/sbin/aide·--check | 198 | $·sudo·/usr/sbin/aide·--check |
| Offset 333, 45 lines modified | Offset 333, 45 lines modified | ||
| 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 333 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 334 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 335 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 336 | [[customizations.filesystem]] | 336 | [[customizations.filesystem]] |
| 337 | mountpoint·=·"/home" | 337 | mountpoint·=·"/home" |
| 338 | size·=·1073741824 | 338 | size·=·1073741824 |
| 339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 340 | logvol·/home·1024 | ||
| 341 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 339 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 278580/284263 bytes (98.00%) of diff not shown. | |||
| Offset 14429, 15 lines modified | Offset 14429, 15 lines modified | ||
| 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385c0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385d0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 000385e0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 000385f0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038600:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038610:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038620:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038630:·6620·3230·323 | 00038630:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038640:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038650:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038660:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038670:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038680:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038690:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386a0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15187, 236 lines modified | Offset 15187, 236 lines modified | ||
| 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b520:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b530:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b540:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b550:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b560:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b570:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b580:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b590:·5265·6d65·6469·6174·696f·6e20·4 | 0003b590:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b5a0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b5b0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b5c0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b5d0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b5e0:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b5f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b600:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b610:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b620:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b | 0003b5a0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b5b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b5c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b5d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b5e0:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b5f0:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b600:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b610:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b620:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b630:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b640:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b650:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b660:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b670:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b680:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | |||
| 0003b690:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b6a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b6b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b6e0:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b6f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b700:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b710:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b720:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b730:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 0003b740:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b750:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b760:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b770:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b780:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b790:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b7a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b7b0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b7c0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b7d0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b7e0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b7f0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b800:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b810:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b820:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b830:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b840:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b850:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b860:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b870:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b890:·3d22·2369·646d·3834·3330·2220·7461·6269··="#idm8430"·tabi | |||
| 0003b8a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b8b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b8c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b8d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b8e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b8f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b900:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b910:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b920:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b930:·7073·6522·2069·643d·2269·646d·3834·3330··pse"·id="idm8430 | |||
| 0003b940:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b950:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b960:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b970:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b980:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b990:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003b9a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b680:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b690:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b6a0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b6b0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b6c0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b6d0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b6e0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b6f0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b700:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b710:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b720:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b730:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b740:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b750:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b760:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b770:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b780:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b790:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b7a0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b7b0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b7c0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b7d0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b7e0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b7f0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b800:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b810:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b820:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b830:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b840:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| Max diff block lines reached; 5601156/5633502 bytes (99.43%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 120, 14 lines modified | Offset 120, 33 lines modified | ||
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8c_\x8i_\x8s············6.1.1 | 124 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 126 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·--add=aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·install·aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 148 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 149 | ··package: |
| Offset 142, 38 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 176, 26 lines modified | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | 176 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 182 | ····dnf·install·-y·"aide" | 177 | ····dnf·install·-y·"aide" |
| 183 | fi | 178 | fi |
| 184 | else | 179 | else |
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 186 | fi | 181 | fi |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 192 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 817, 45 lines modified | Offset 817, 45 lines modified | ||
| 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 817 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 818 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 819 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 820 | [[customizations.filesystem]] | 820 | [[customizations.filesystem]] |
| 821 | mountpoint·=·"/home" | 821 | mountpoint·=·"/home" |
| 822 | size·=·1073741824 | 822 | size·=·1073741824 |
| 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 824 | logvol·/home·1024 | ||
| 825 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 823 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 289451/295081 bytes (98.09%) of diff not shown. | |||
| Offset 14431, 15 lines modified | Offset 14431, 15 lines modified | ||
| 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 000385e0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 000385f0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038600:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038610:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038620:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038630:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00038640:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00038650:·6620·3230·323 | 00038650:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00038660:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00038670:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00038680:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00038690:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000386a0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000386b0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 000386c0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15178, 235 lines modified | Offset 15178, 235 lines modified | ||
| 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b490:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | 0003b4a0:·3238·2220·7461·6269·6e64·6578·3d22·3022··28"·tabindex="0" | ||
| 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b4b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b4c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b4d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b4e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b4f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b500:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b510:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b520:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b530:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b540:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b550:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b560:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b570:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b580:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b590:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5 | 0003b500:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b510:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b520:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b530:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b540:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b550:·6964·3d22·6964·6d38·3432·3822·3e3c·7072··id="idm8428"><pr | |||
| 0003b560:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b570:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b580:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b590:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b5a0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b5b0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b5c0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b5d0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b5e0:·6574·3d22·2369·646d·3834·3239·2220·7461··et="#idm8429"·ta | |||
| 0003b5f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b600:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b610:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b620:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b630:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b640:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b650:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0003b660:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b670:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b680:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b690:·2069·643d·2269·646d·3834·3239·223e·3c74···id="idm8429"><t | |||
| 0003b6a0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b6b0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b6c0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b6d0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b6e0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b6f0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b700:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b710:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b | 0003b720:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 0003b | 0003b730:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0003b740:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b750:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b760:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b770:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b780:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b790:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003b7a0:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003b7b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b7c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b7d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b7e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b7f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b800:·3834·3330·2220·7461·6269·6e64·6578·3d22··8430"·tabindex=" | |||
| 0003b810:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b820:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b830:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b840:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b850:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b860:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 0003b870:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b880:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b890:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b8a0:·643d·2269·646d·3834·3330·223e·3c74·6162··d="idm8430"><tab | |||
| 0003b8b0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b8c0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b8d0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b8e0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b8f0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b | 0003b900:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b910:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b920:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b930:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b940:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b950:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b | 0003b960:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b5f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b600:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b610:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b620:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b630:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b640:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b650:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b660:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b670:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b680:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b690:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b6a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b6b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b6c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b6d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b6e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b6f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b700:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b710:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b720:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b730:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b740:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b750:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| Max diff block lines reached; 3164934/3197142 bytes (98.99%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 75 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 76 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 77 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 135, 14 lines modified | Offset 135, 33 lines modified | ||
| 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 135 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 136 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 137 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 138 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 139 | ············_\x8c_\x8i_\x8s············6.1.1 | 139 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 140 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 141 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·--add=aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 147 | -·name:·Ensure·aide·is·installed | 163 | -·name:·Ensure·aide·is·installed |
| 148 | ··package: | 164 | ··package: |
| Offset 157, 38 lines modified | Offset 176, 14 lines modified | ||
| 157 | ··-·PCI-DSSv4-11.5.2 | 176 | ··-·PCI-DSSv4-11.5.2 |
| 158 | ··-·enable_strategy | 177 | ··-·enable_strategy |
| 159 | ··-·low_complexity | 178 | ··-·low_complexity |
| 160 | ··-·low_disruption | 179 | ··-·low_disruption |
| 161 | ··-·medium_severity | 180 | ··-·medium_severity |
| 162 | ··-·no_reboot_needed | 181 | ··-·no_reboot_needed |
| 163 | ··-·package_aide_installed | 182 | ··-·package_aide_installed |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | include·install_aide | ||
| 170 | class·install_aide·{ | ||
| 171 | ··package·{·'aide': | ||
| 172 | ····ensure·=>·'installed', | ||
| 173 | ··} | ||
| 174 | } | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 176 | [[packages]] | ||
| 177 | name·=·"aide" | ||
| 178 | version·=·"*" | ||
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 184 | package·install·aide | ||
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | #·Remediation·is·applicable·only·in·certain·platforms | 188 | #·Remediation·is·applicable·only·in·certain·platforms |
| 191 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 189 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 196, 21 lines modified | Offset 191, 26 lines modified | ||
| 196 | if·!·rpm·-q·--quiet·"aide"·;·then | 191 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 197 | ····dnf·install·-y·"aide" | 192 | ····dnf·install·-y·"aide" |
| 198 | fi | 193 | fi |
| 199 | else | 194 | else |
| 200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 201 | fi | 196 | fi |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 202 | include·install_aide | ||
| 207 | 203 | class·install_aide·{ | |
| 204 | ··package·{·'aide': | ||
| 205 | ····ensure·=>·'installed', | ||
| 206 | ··} | ||
| 207 | } | ||
| 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 208 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 209 | Run·the·following·command·to·generate·a·new·database: | 209 | Run·the·following·command·to·generate·a·new·database: |
| 210 | $·sudo·/usr/sbin/aide·--init | 210 | $·sudo·/usr/sbin/aide·--init |
| 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 211 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 212 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 212 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 213 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 213 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 214 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 214 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 372, 24 lines modified | Offset 372, 24 lines modified | ||
| 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 | 372 | ············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | [[customizations.filesystem]] | 375 | [[customizations.filesystem]] |
| 376 | mountpoint·=·"/home" | 376 | mountpoint·=·"/home" |
| 377 | size·=·1073741824 | 377 | size·=·1073741824 |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 379 | logvol·/home·1024 | ||
| 380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 194118/199690 bytes (97.21%) of diff not shown. | |||
| Offset 14430, 15 lines modified | Offset 14430, 15 lines modified | ||
| 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000385d0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 000385e0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 000385f0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038600:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038610:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038620:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038630:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038640:·323 | 00038640:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038650:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038660:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038670:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038680:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038690:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000386a0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 000386b0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 14849, 217 lines modified | Offset 14849, 217 lines modified | ||
| 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003a000:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | 0003a010:·3132·3538·3922·2074·6162·696e·6465·783d··12589"·tabindex= | ||
| 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003a020:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003a030:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003a040:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003a050:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003a060:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003a070:·6564·6961·7469·6f6e·204 | 0003a070:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003a080:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003a090:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a0a0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003a0b0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003a0c0:·3132·3538·3922·3e3c·7461·626c·6520·636c··12589"><table·cl | |||
| 0003a0d0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003a0e0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003a0f0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003a100:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003a110:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003a120:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003a130:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003a140:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003a150:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a | 0003a080:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003a090:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003a0a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003a0b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003a0c0:·6522·2069·643d·2269·646d·3132·3538·3922··e"·id="idm12589" | |||
| 0003a0d0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003a0e0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003a0f0:·2022·646e·662d·6175·746f·6d61·7469·6322···"dnf-automatic" | |||
| 0003a100:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003a110:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003a120:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003a130:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003a140:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003a150:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003a160:·2223·6964·6d31·3235·3930·2220·7461·6269··"#idm12590"·tabi | |||
| 0003a170:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003a180:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003a190:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003a1a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003a1b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003a1c0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003a1d0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003a1e0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003a1f0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003a200:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003a210:·643d·2269·646d·3132·3539·3022·3e3c·7461··d="idm12590"><ta | |||
| 0003a220:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003a230:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003a240:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003a250:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003a260:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003a270:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003a280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a290:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003a2a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a2b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003a2c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003a2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003a2e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003a | 0003a2f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | ||
| 0003a300:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003a310:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003a180:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003a190:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003a1a0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003a1b0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003a1c0:·206e·616d·653a·2045·6e73·7572·6520·646e···name:·Ensure·dn | |||
| 0003a1d0:·662d·6175·746f·6d61·7469·6320·6973·2069··f-automatic·is·i | |||
| 0003a1e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003a1f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·646e··ge:.····name:·dn | |||
| 0003a200:·662d·6175·746f·6d61·7469·630a·2020·2020··f-automatic.···· | |||
| 0003a210:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003a220:·2074·6167·733a·0a20·202d·2065·6e61·626c···tags:.··-·enabl | |||
| 0003a230:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003a240:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003a250:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003a260:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003a270:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003a280:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003a | 0003a320:·6164·643d·646e·662d·6175·746f·6d61·7469··add=dnf-automati | ||
| 0003a2a0:·7469·635f·696e·7374·616c·6c65·640a·3c2f··tic_installed.</ | |||
| 0003a | 0003a330:·630a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··c.</code></pre>< | ||
| 0003a | 0003a340:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0003a | 0003a350:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0003a | 0003a360:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0003a | 0003a370:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0003a3 | 0003a380:·6574·3d22·2369·646d·3132·3539·3122·2074··et="#idm12591"·t | ||
| 0003a3 | 0003a390:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003a3 | 0003a3a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003a3 | 0003a3b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003a3 | 0003a3c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003a3 | 0003a3d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003a3 | 0003a3e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003a3f0:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 0003a400:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a410:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a420:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a430:·3235·3931·223e·3c74·6162·6c65·2063·6c61··2591"><table·cla | |||
| 0003a440:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a450:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a460:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a470:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a480:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a490:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a4a0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a4b0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a4c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a4d0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a4e0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| Max diff block lines reached; 369928/399652 bytes (92.56%) of diff not shown. | |||
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 65 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 66 | ····*·cpe:/o:redhat:enterprise_linux:9 | 66 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 67 | ····*·cpe:/o:centos:centos:9 | 67 | ····*·cpe:/o:centos:centos:9 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 73 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 75 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 76 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 77 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 100, 14 lines modified | Offset 100, 33 lines modified | ||
| 100 | $·sudo·dnf·install·dnf-automatic | 100 | $·sudo·dnf·install·dnf-automatic |
| 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 101 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 102 | ············suitable·for·automatic,·regular·execution. | 102 | ············suitable·for·automatic,·regular·execution. |
| 103 | Severity: ··medium | 103 | Severity: ··medium |
| 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 104 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 105 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 106 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | [[packages]] | ||
| 109 | name·=·"dnf-automatic" | ||
| 110 | version·=·"*" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·--add=dnf-automatic | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·install·dnf-automatic | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | -·name:·Ensure·dnf-automatic·is·installed | 128 | -·name:·Ensure·dnf-automatic·is·installed |
| 113 | ··package: | 129 | ··package: |
| Offset 116, 54 lines modified | Offset 135, 35 lines modified | ||
| 116 | ··tags: | 135 | ··tags: |
| 117 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 118 | ··-·low_complexity | 137 | ··-·low_complexity |
| 119 | ··-·low_disruption | 138 | ··-·low_disruption |
| 120 | ··-·medium_severity | 139 | ··-·medium_severity |
| 121 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 122 | ··-·package_dnf-automatic_installed | 141 | ··-·package_dnf-automatic_installed |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | include·install_dnf-automatic | ||
| 129 | class·install_dnf-automatic·{ | ||
| 130 | ··package·{·'dnf-automatic': | ||
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"dnf-automatic" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·install·dnf-automatic | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 147 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 150 | ····dnf·install·-y·"dnf-automatic" | 148 | ····dnf·install·-y·"dnf-automatic" |
| 151 | fi | 149 | fi |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | include·install_dnf-automatic | ||
| 156 | class·install_dnf-automatic·{ | ||
| 157 | package· | 157 | ··package·{·'dnf-automatic': |
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 158 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 159 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 162 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 160 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 163 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 161 | automatic.conf. | 164 | automatic.conf. |
| 162 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 165 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 163 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 166 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 164 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 167 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9474, 14 lines modified | Offset 9474, 28 lines modified | ||
| 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9474 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9475 | ···························A.9.1.2 | 9475 | ···························A.9.1.2 |
| 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9476 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9477 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9478 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9479 | ············_\x8c_\x8i_\x8s············2.1.3 | 9479 | ············_\x8c_\x8i_\x8s············2.1.3 |
| 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9486 | package·--remove=dhcp-server | ||
| 9487 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9488 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9489 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43122/49009 bytes (87.99%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 000384f0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038500:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038510:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038520:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038530:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038540:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038550:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038560:·7320·6f66·2032·3032·3 | 00038560:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038570:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038580:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038590:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385a0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385b0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385c0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385d0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15226, 249 lines modified | Offset 15226, 249 lines modified | ||
| 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b790:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7a0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b7f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b800:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b810:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b820:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b830:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b840:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003b850:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b860:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b800:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0003b810:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b820:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b830:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b840:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b850:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b860:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b870:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b8 | 0003b870:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b880:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b890:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b8a0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b890:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b8a0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8c0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8d0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8 | 0003b8b0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b8f0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003b8c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b8d0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b8e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b8f0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b900:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b910:· | 0003b910:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b920:· | 0003b920:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003b930:· | 0003b930:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003b940:·6 | 0003b940:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003b950:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 0003b960:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b970:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b980:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b990:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9a0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9b0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9c0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9d0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9e0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003b9f0:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba00:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba10:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba20:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba30:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba40:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba50:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba60:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba70:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba80:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003ba90:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003baa0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bab0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003bac0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003bad0:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 0003bae0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003baf0:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 0003bb00:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb10:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb20:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb30:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb40:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb50:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bb90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bba0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbb0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbc0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbd0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbe0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bbf0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc10:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc20:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc50:·7073·6522·2069·643d·2269·646d·3931·3838··pse"·id="idm9188 | |||
| 0003bc60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc80:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc90:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bca0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bcb0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bcc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bcd0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bce0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bcf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bd00:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bd10:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bd20:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bd30:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003bd40:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd50:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b | 0003b950:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | ||
| 0003b | 0003b960:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | ||
| 0003b | 0003b970:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | ||
| 0003b | 0003b980:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | ||
| Max diff block lines reached; 2501181/2535321 bytes (98.65%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Advanced | 60 | ··············Linux·9·-·Advanced |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 39 lines modified | Offset 119, 14 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 131 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 132 | ··set_fact: |
| Offset 219, 14 lines modified | Offset 194, 39 lines modified | ||
| 219 | » echo·"to·see·what·package·to·(re)install"·>&2 | 194 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 220 | » false··#·end·with·an·error·code | 195 | » false··#·end·with·an·error·code |
| 221 | elif·test·"$rc"·!=·0;·then | 196 | elif·test·"$rc"·!=·0;·then |
| 222 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 197 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 223 | » false··#·end·with·an·error·code | 198 | » false··#·end·with·an·error·code |
| 224 | fi | 199 | fi |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 205 | --- | ||
| 206 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 207 | kind:·MachineConfig | ||
| 208 | spec: | ||
| 209 | ··config: | ||
| 210 | ····ignition: | ||
| 211 | ······version:·3.1.0 | ||
| 212 | ····systemd: | ||
| 213 | ······units: | ||
| 214 | ········-·name:·configure-crypto-policy.service | ||
| 215 | ··········enabled:·true | ||
| 216 | ··········contents:·| | ||
| 217 | ············[Unit] | ||
| 218 | ············Before=kubelet.service | ||
| 219 | ············[Service] | ||
| 220 | ············Type=oneshot | ||
| 221 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 222 | ············RemainAfterExit=yes | ||
| 223 | ············[Install] | ||
| 224 | ············WantedBy=multi-user.target | ||
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 226 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 226 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 227 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 227 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 228 | Severity: ··medium | 228 | Severity: ··medium |
| 229 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 229 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 230 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 230 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 231 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 231 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1718, 14 lines modified | Offset 1718, 33 lines modified | ||
| 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1718 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·c\x8cr\x8ry\x8yp\x8pt\x8ts\x8se\x8et\x8tu\x8up\x8p·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: | 1719 | The·cryptsetup·package·can·be·installed·with·the·following·command: |
| 1720 | $·sudo·dnf·install·cryptsetup | 1720 | $·sudo·dnf·install·cryptsetup |
| 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1721 | Rationale:··LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1722 | Severity: ··medium | 1722 | Severity: ··medium |
| 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1723 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1724 | References:·_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1726 | [[packages]] | ||
| 1727 | name·=·"cryptsetup" | ||
| 1728 | version·=·"*" | ||
| 1729 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1730 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1731 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1732 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1733 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1734 | package·--add=cryptsetup | ||
| 1735 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1736 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1737 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1738 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1739 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1740 | package·install·cryptsetup | ||
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1726 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1742 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1727 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1743 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1728 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1744 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1729 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1745 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 158982/165644 bytes (95.98%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000384e0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 000384f0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038500:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038510:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038520:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038530:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038540:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038550:·2020·2861·7320·6f66·2032·3032·3 | 00038550:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00038560:·2d32·3 | 00038560:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038570:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038580:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038590:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000385a0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000385b0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000385c0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000385d0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15186, 249 lines modified | Offset 15186, 249 lines modified | ||
| 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b510:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | 0003b520:·3931·3837·2220·7461·6269·6e64·6578·3d22··9187"·tabindex=" | ||
| 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b530:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b540:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b550:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b560:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b570:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b580:·6469·6174·696f·6e20·4 | 0003b580:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003b590:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b5a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b5b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b5c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 0003b5d0:·3138·3722·3e3c·7461·626c·6520·636c·6173··187"><table·clas | |||
| 0003b5e0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b5f0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b600:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b610:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b620:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b590:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3931·3837·223e·3c74·6162·6c65·2063··dm9187"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b6 | 0003b630:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b6 | 0003b640:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b650:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b660:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b670:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b680:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b690:· | 0003b690:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003b6a0:· | 0003b6a0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | ||
| 0003b6b0:· | 0003b6b0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | ||
| 0003b6c0:· | 0003b6c0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | ||
| 0003b6d0:·3e2d·2d2d·0a61·7069·5665·7273·696f·6e3a··>---.apiVersion: | |||
| 0003b6e0:·206d·6163·6869·6e65·636f·6e66·6967·7572···machineconfigur | |||
| 0003b6f0:·6174·696f·6e2e·6f70·656e·7368·6966·742e··ation.openshift. | |||
| 0003b700:·696f·2f76·310a·6b69·6e64·3a20·4d61·6368··io/v1.kind:·Mach | |||
| 0003b710:·696e·6543·6f6e·6669·670a·7370·6563·3a0a··ineConfig.spec:. | |||
| 0003b720:·2020·636f·6e66·6967·3a0a·2020·2020·6967····config:.····ig | |||
| 0003b730:·6e69·7469·6f6e·3a0a·2020·2020·2020·7665··nition:.······ve | |||
| 0003b740:·7273·696f·6e3a·2033·2e31·2e30·0a20·2020··rsion:·3.1.0.··· | |||
| 0003b750:·2073·7973·7465·6d64·3a0a·2020·2020·2020···systemd:.······ | |||
| 0003b760:·756e·6974·733a·0a20·2020·2020·2020·202d··units:.········- | |||
| 0003b770:·206e·616d·653a·2063·6f6e·6669·6775·7265···name:·configure | |||
| 0003b780:·2d63·7279·7074·6f2d·706f·6c69·6379·2e73··-crypto-policy.s | |||
| 0003b790:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 0003b7a0:·2065·6e61·626c·6564·3a20·7472·7565·0a20···enabled:·true.· | |||
| 0003b7b0:·2020·2020·2020·2020·2063·6f6e·7465·6e74···········content | |||
| 0003b7c0:·733a·207c·0a20·2020·2020·2020·2020·2020··s:·|.··········· | |||
| 0003b7d0:·205b·556e·6974·5d0a·2020·2020·2020·2020···[Unit].········ | |||
| 0003b7e0:·2020·2020·4265·666f·7265·3d6b·7562·656c······Before=kubel | |||
| 0003b7f0:·6574·2e73·6572·7669·6365·0a20·2020·2020··et.service.····· | |||
| 0003b800:·2020·2020·2020·205b·5365·7276·6963·655d·········[Service] | |||
| 0003b810:·0a20·2020·2020·2020·2020·2020·2054·7970··.············Typ | |||
| 0003b820:·653d·6f6e·6573·686f·740a·2020·2020·2020··e=oneshot.······ | |||
| 0003b830:·2020·2020·2020·4578·6563·5374·6172·743d········ExecStart= | |||
| 0003b840:·7570·6461·7465·2d63·7279·7074·6f2d·706f··update-crypto-po | |||
| 0003b850:·6c69·6369·6573·202d·2d73·6574·207b·7b2e··licies·--set·{{. | |||
| 0003b860:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 0003b870:·6f5f·706f·6c69·6379·7d7d·0a20·2020·2020··o_policy}}.····· | |||
| 0003b880:·2020·2020·2020·2052·656d·6169·6e41·6674·········RemainAft | |||
| 0003b890:·6572·4578·6974·3d79·6573·0a20·2020·2020··erExit=yes.····· | |||
| 0003b8a0:·2020·2020·2020·205b·496e·7374·616c·6c5d·········[Install] | |||
| 0003b8b0:·0a20·2020·2020·2020·2020·2020·2057·616e··.············Wan | |||
| 0003b8c0:·7465·6442·793d·6d75·6c74·692d·7573·6572··tedBy=multi-user | |||
| 0003b8d0:·2e74·6172·6765·740a·3c2f·636f·6465·3e3c··.target.</code>< | |||
| 0003b8e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b900:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b910:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b920:·612d·7461·7267·6574·3d22·2369·646d·3931··a-target="#idm91 | |||
| 0003b930:·3838·2220·7461·6269·6e64·6578·3d22·3022··88"·tabindex="0" | |||
| 0003b940:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b950:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b960:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b970:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b980:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b990:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b9a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b9b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b9c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b9d0:·6170·7365·2220·6964·3d22·6964·6d39·3138··apse"·id="idm918 | |||
| 0003b9e0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 0003b9f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ba00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ba10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ba20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ba30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ba40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003ba50:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003ba60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003ba80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ba90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003baa0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bab0:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | |||
| 0003bac0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bad0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b | 0003b6d0:·206e·616d·653a·2058·4343·4446·2056·616c···name:·XCCDF·Val | ||
| 0003b | 0003b6e0:·7565·2076·6172·5f73·7973·7465·6d5f·6372··ue·var_system_cr | ||
| 0003b | 0003b6f0:·7970·746f·5f70·6f6c·6963·7920·2320·7072··ypto_policy·#·pr | ||
| Max diff block lines reached; 2092100/2126378 bytes (98.39%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Basic | 60 | ··············Linux·9·-·Basic |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 39 lines modified | Offset 111, 14 lines modified | ||
| 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 111 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 112 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 113 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 114 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 115 | ············_\x8c_\x8i_\x8s······1.6.1 | 115 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 123 | --- | ||
| 124 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 125 | kind:·MachineConfig | ||
| 126 | spec: | ||
| 127 | ··config: | ||
| 128 | ····ignition: | ||
| 129 | ······version:·3.1.0 | ||
| 130 | ····systemd: | ||
| 131 | ······units: | ||
| 132 | ········-·name:·configure-crypto-policy.service | ||
| 133 | ··········enabled:·true | ||
| 134 | ··········contents:·| | ||
| 135 | ············[Unit] | ||
| 136 | ············Before=kubelet.service | ||
| 137 | ············[Service] | ||
| 138 | ············Type=oneshot | ||
| 139 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 140 | ············RemainAfterExit=yes | ||
| 141 | ············[Install] | ||
| 142 | ············WantedBy=multi-user.target | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 148 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 123 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 149 | ··set_fact: | 124 | ··set_fact: |
| Offset 211, 14 lines modified | Offset 186, 39 lines modified | ||
| 211 | » echo·"to·see·what·package·to·(re)install"·>&2 | 186 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 212 | » false··#·end·with·an·error·code | 187 | » false··#·end·with·an·error·code |
| 213 | elif·test·"$rc"·!=·0;·then | 188 | elif·test·"$rc"·!=·0;·then |
| 214 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 189 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 215 | » false··#·end·with·an·error·code | 190 | » false··#·end·with·an·error·code |
| 216 | fi | 191 | fi |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 197 | --- | ||
| 198 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 199 | kind:·MachineConfig | ||
| 200 | spec: | ||
| 201 | ··config: | ||
| 202 | ····ignition: | ||
| 203 | ······version:·3.1.0 | ||
| 204 | ····systemd: | ||
| 205 | ······units: | ||
| 206 | ········-·name:·configure-crypto-policy.service | ||
| 207 | ··········enabled:·true | ||
| 208 | ··········contents:·| | ||
| 209 | ············[Unit] | ||
| 210 | ············Before=kubelet.service | ||
| 211 | ············[Service] | ||
| 212 | ············Type=oneshot | ||
| 213 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 214 | ············RemainAfterExit=yes | ||
| 215 | ············[Install] | ||
| 216 | ············WantedBy=multi-user.target | ||
| 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 217 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 218 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 218 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 219 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 219 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 220 | Severity: ··medium | 220 | Severity: ··medium |
| 221 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 221 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 222 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 222 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 223 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 223 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1069, 36 lines modified | Offset 1069, 14 lines modified | ||
| 1069 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 1069 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 1070 | ············_\x8n_\x8i_\x8s_\x8t···········AC-8(a),·AC-8(c) | 1070 | ············_\x8n_\x8i_\x8s_\x8t···········AC-8(a),·AC-8(c) |
| 1071 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 1071 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 1072 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 1072 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 1073 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 | 1073 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 |
| 1074 | ············_\x8c_\x8i_\x8s············1.7.2 | 1074 | ············_\x8c_\x8i_\x8s············1.7.2 |
| 1075 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule | 1075 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule |
| 1076 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1077 | --- | ||
| 1078 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1079 | kind:·MachineConfig | ||
| 1080 | metadata: | ||
| 1081 | ··labels: | ||
| 1082 | ····machineconfiguration.openshift.io/role:·master | ||
| 1083 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1084 | ··name:·75-banner-etc-issue | ||
| 1085 | spec: | ||
| 1086 | ··config: | ||
| 1087 | ····ignition: | ||
| 1088 | ······version:·3.1.0 | ||
| 1089 | ····storage: | ||
| 1090 | ······files: | ||
| 1091 | ······-·contents: | ||
| 1092 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1093 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1094 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1095 | ········mode:·0644 | ||
| 1096 | ········path:·/etc/issue.d/legal-notice | ||
| 1097 | ········overwrite:·true | ||
| 1098 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1076 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1099 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1077 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 101358/109186 bytes (92.83%) of diff not shown. | |||
| Offset 14417, 15 lines modified | Offset 14417, 15 lines modified | ||
| 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038500:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038510:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038520:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038530:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038540:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038550:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038560:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038570:·7320·6f66·2032·3032·3 | 00038570:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038580:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038590:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000385a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000385b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000385c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000385d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000385e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15227, 249 lines modified | Offset 15227, 249 lines modified | ||
| 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 0003b7a0:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | 0003b7b0:·3138·3722·2074·6162·696e·6465·783d·2230··187"·tabindex="0 | ||
| 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b7c0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b7d0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b7e0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b7f0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b800:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b810:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b820:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b830:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b840:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b850:·6c61·7073·6522·2069·643d·2269·646d·3931··lapse"·id="idm91 | |||
| 0003b860:·3837·223e·3c74·6162·6c65·2063·6c61·7373··87"><table·class | |||
| 0003b870:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b810:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0003b820:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0003b830:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b840:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b850:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b860:·6d39·3138·3722·3e3c·7461·626c·6520·636c··m9187"><table·cl | |||
| 0003b870:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b880:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b8 | 0003b880:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0003b890:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b8a0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b8b0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b8a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b8b0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b8c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b8d0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b8e0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b8 | 0003b8c0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b900:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b | 0003b8d0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b8e0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b8f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b900:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b910:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b920:· | 0003b920:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0003b930:· | 0003b930:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | ||
| 0003b940:· | 0003b940:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | ||
| 0003b950:·6 | 0003b950:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 0003b960:·2d2d·2d0a·6170·6956·6572·7369·6f6e·3a20··---.apiVersion:· | |||
| 0003b970:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 0003b980:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 0003b990:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 0003b9a0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| 0003b9b0:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | |||
| 0003b9c0:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | |||
| 0003b9d0:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | |||
| 0003b9e0:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | |||
| 0003b9f0:·6e69·7473·3a0a·2020·2020·2020·2020·2d20··nits:.········-· | |||
| 0003ba00:·6e61·6d65·3a20·636f·6e66·6967·7572·652d··name:·configure- | |||
| 0003ba10:·6372·7970·746f·2d70·6f6c·6963·792e·7365··crypto-policy.se | |||
| 0003ba20:·7276·6963·650a·2020·2020·2020·2020·2020··rvice.·········· | |||
| 0003ba30:·656e·6162·6c65·643a·2074·7275·650a·2020··enabled:·true.·· | |||
| 0003ba40:·2020·2020·2020·2020·636f·6e74·656e·7473··········contents | |||
| 0003ba50:·3a20·7c0a·2020·2020·2020·2020·2020·2020··:·|.············ | |||
| 0003ba60:·5b55·6e69·745d·0a20·2020·2020·2020·2020··[Unit].········· | |||
| 0003ba70:·2020·2042·6566·6f72·653d·6b75·6265·6c65·····Before=kubele | |||
| 0003ba80:·742e·7365·7276·6963·650a·2020·2020·2020··t.service.······ | |||
| 0003ba90:·2020·2020·2020·5b53·6572·7669·6365·5d0a········[Service]. | |||
| 0003baa0:·2020·2020·2020·2020·2020·2020·5479·7065··············Type | |||
| 0003bab0:·3d6f·6e65·7368·6f74·0a20·2020·2020·2020··=oneshot.······· | |||
| 0003bac0:·2020·2020·2045·7865·6353·7461·7274·3d75·······ExecStart=u | |||
| 0003bad0:·7064·6174·652d·6372·7970·746f·2d70·6f6c··pdate-crypto-pol | |||
| 0003bae0:·6963·6965·7320·2d2d·7365·7420·7b7b·2e76··icies·--set·{{.v | |||
| 0003baf0:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | |||
| 0003bb00:·5f70·6f6c·6963·797d·7d0a·2020·2020·2020··_policy}}.······ | |||
| 0003bb10:·2020·2020·2020·5265·6d61·696e·4166·7465········RemainAfte | |||
| 0003bb20:·7245·7869·743d·7965·730a·2020·2020·2020··rExit=yes.······ | |||
| 0003bb30:·2020·2020·2020·5b49·6e73·7461·6c6c·5d0a········[Install]. | |||
| 0003bb40:·2020·2020·2020·2020·2020·2020·5761·6e74··············Want | |||
| 0003bb50:·6564·4279·3d6d·756c·7469·2d75·7365·722e··edBy=multi-user. | |||
| 0003bb60:·7461·7267·6574·0a3c·2f63·6f64·653e·3c2f··target.</code></ | |||
| 0003bb70:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bb80:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bb90:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bba0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bbb0:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | |||
| 0003bbc0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | |||
| 0003bbd0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bbe0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bbf0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bc00:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bc10:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bc20:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bc30:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bc40:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bc50:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bc60:·7073·6522·2069·643d·2269·646d·3931·3838··pse"·id="idm9188 | |||
| 0003bc70:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc80:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc90:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bca0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bcb0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bcc0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bcd0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bce0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bcf0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bd00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bd10:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bd20:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bd30:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bd40:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | |||
| 0003bd50:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003bd60:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b | 0003b960:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | ||
| 0003b | 0003b970:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | ||
| 0003b | 0003b980:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | ||
| 0003b | 0003b990:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | ||
| Max diff block lines reached; 2473070/2507210 bytes (98.64%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Linux·9·-·Intermediate | 60 | ··············Linux·9·-·Intermediate |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 74 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 39 lines modified | Offset 119, 14 lines modified | ||
| 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 119 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 120 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 121 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 123 | ············_\x8c_\x8i_\x8s······1.6.1 | 123 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 125 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 131 | --- | ||
| 132 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 133 | kind:·MachineConfig | ||
| 134 | spec: | ||
| 135 | ··config: | ||
| 136 | ····ignition: | ||
| 137 | ······version:·3.1.0 | ||
| 138 | ····systemd: | ||
| 139 | ······units: | ||
| 140 | ········-·name:·configure-crypto-policy.service | ||
| 141 | ··········enabled:·true | ||
| 142 | ··········contents:·| | ||
| 143 | ············[Unit] | ||
| 144 | ············Before=kubelet.service | ||
| 145 | ············[Service] | ||
| 146 | ············Type=oneshot | ||
| 147 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 148 | ············RemainAfterExit=yes | ||
| 149 | ············[Install] | ||
| 150 | ············WantedBy=multi-user.target | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 156 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 131 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 157 | ··set_fact: | 132 | ··set_fact: |
| Offset 219, 14 lines modified | Offset 194, 39 lines modified | ||
| 219 | » echo·"to·see·what·package·to·(re)install"·>&2 | 194 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 220 | » false··#·end·with·an·error·code | 195 | » false··#·end·with·an·error·code |
| 221 | elif·test·"$rc"·!=·0;·then | 196 | elif·test·"$rc"·!=·0;·then |
| 222 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 197 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 223 | » false··#·end·with·an·error·code | 198 | » false··#·end·with·an·error·code |
| 224 | fi | 199 | fi |
| 200 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 201 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 202 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 203 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 204 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 205 | --- | ||
| 206 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 207 | kind:·MachineConfig | ||
| 208 | spec: | ||
| 209 | ··config: | ||
| 210 | ····ignition: | ||
| 211 | ······version:·3.1.0 | ||
| 212 | ····systemd: | ||
| 213 | ······units: | ||
| 214 | ········-·name:·configure-crypto-policy.service | ||
| 215 | ··········enabled:·true | ||
| 216 | ··········contents:·| | ||
| 217 | ············[Unit] | ||
| 218 | ············Before=kubelet.service | ||
| 219 | ············[Service] | ||
| 220 | ············Type=oneshot | ||
| 221 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 222 | ············RemainAfterExit=yes | ||
| 223 | ············[Install] | ||
| 224 | ············WantedBy=multi-user.target | ||
| 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 225 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 226 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 226 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 227 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 227 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 228 | Severity: ··medium | 228 | Severity: ··medium |
| 229 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 229 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 230 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 230 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 231 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 231 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 2111, 36 lines modified | Offset 2111, 14 lines modified | ||
| 2111 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2111 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.9.2.1,·A.9.2.4,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2112 | ············_\x8n_\x8i_\x8s_\x8t···········AC-8(a),·AC-8(c) | 2112 | ············_\x8n_\x8i_\x8s_\x8t···········AC-8(a),·AC-8(c) |
| 2113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 2113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 2114 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 2114 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 2115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 | 2115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 |
| 2116 | ············_\x8c_\x8i_\x8s············1.7.2 | 2116 | ············_\x8c_\x8i_\x8s············1.7.2 |
| 2117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule | 2117 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule |
| 2118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2119 | --- | ||
| 2120 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2121 | kind:·MachineConfig | ||
| 2122 | metadata: | ||
| 2123 | ··labels: | ||
| 2124 | ····machineconfiguration.openshift.io/role:·master | ||
| 2125 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2126 | ··name:·75-banner-etc-issue | ||
| 2127 | spec: | ||
| 2128 | ··config: | ||
| 2129 | ····ignition: | ||
| 2130 | ······version:·3.1.0 | ||
| 2131 | ····storage: | ||
| 2132 | ······files: | ||
| 2133 | ······-·contents: | ||
| 2134 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2135 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2136 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2137 | ········mode:·0644 | ||
| 2138 | ········path:·/etc/issue.d/legal-notice | ||
| 2139 | ········overwrite:·true | ||
| 2140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 152971/160813 bytes (95.12%) of diff not shown. | |||
| Offset 14413, 15 lines modified | Offset 14413, 15 lines modified | ||
| 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 000384c0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000384d0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000384e0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000384f0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038500:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038510:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038520:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00038530:·3 | 00038530:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00038540:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00038550:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00038560:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00038570:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00038580:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038590:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 000385a0:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 15232, 236 lines modified | Offset 15232, 236 lines modified | ||
| 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b7f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | 0003b800:·6d38·3432·3822·2074·6162·696e·6465·783d··m8428"·tabindex= | ||
| 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b810:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b820:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b830:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b840:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b850:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b860:·6564·6961·7469·6f6e·204 | 0003b860:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b870:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b870:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b880:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b890:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b8a0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b8b0:·3834·3238·223e·3c74·6162·6c65·2063·6c61··8428"><table·cla | |||
| 0003b8c0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b8d0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b8e0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b8f0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b900:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b910:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b920:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b930:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b940:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b950:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b960:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b970:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b980:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b990:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b9a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b9b0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b9c0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b9d0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b9e0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b9f0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003ba00:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003ba10:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003ba20:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003ba30:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003ba40:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003ba50:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003ba60:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003ba70:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003ba80:·472d·5248·454c·2d30·392d·3635·3130·3130··G-RHEL-09-651010 | |||
| 0003ba90:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003baa0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003bab0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bac0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003bad0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bae0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003baf0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bb00:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003bb10:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003bb20:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003bb30:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003bb40:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003bb50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bb60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bb70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bb80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bb90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bba0:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003bbb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bbc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bbd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bbe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bbf0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bc00:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003bc10:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003bc20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bc30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bc40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bc50:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003bc60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bc70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bc80:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bc90:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bca0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bcb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bcc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bcd0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bce0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bcf0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bd00:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bd10:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003bd20:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003bd30:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003bd40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bd50:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003bd60:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003bd70:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003bd80:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003bd90:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003bda0:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003bdb0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003bdc0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003bdd0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003bde0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003bdf0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003be00:·7461·7267·6574·3d22·2369·646d·3834·3330··target="#idm8430 | |||
| 0003be10:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003be20:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003be30:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003be40:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003be50:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003be60:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003be70:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003be80:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003be90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003beb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bec0:·3d22·6964·6d38·3433·3022·3e3c·7072·653e··="idm8430"><pre> | |||
| Max diff block lines reached; 7536735/7569081 bytes (99.57%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 127, 14 lines modified | Offset 127, 33 lines modified | ||
| 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 127 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ············_\x8c_\x8i_\x8s············6.1.1 | 131 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 132 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 133 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | [[packages]] | ||
| 136 | name·=·"aide" | ||
| 137 | version·=·"*" | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·--add=aide | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | package·install·aide | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | -·name:·Ensure·aide·is·installed | 155 | -·name:·Ensure·aide·is·installed |
| 140 | ··package: | 156 | ··package: |
| Offset 149, 38 lines modified | Offset 168, 14 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 168 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 169 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 170 | ··-·low_complexity |
| 152 | ··-·low_disruption | 171 | ··-·low_disruption |
| 153 | ··-·medium_severity | 172 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 173 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 174 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | include·install_aide | ||
| 162 | class·install_aide·{ | ||
| 163 | ··package·{·'aide': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | package·install·aide | ||
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | #·Remediation·is·applicable·only·in·certain·platforms | 180 | #·Remediation·is·applicable·only·in·certain·platforms |
| 183 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 181 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 188, 21 lines modified | Offset 183, 26 lines modified | ||
| 188 | if·!·rpm·-q·--quiet·"aide"·;·then | 183 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 189 | ····dnf·install·-y·"aide" | 184 | ····dnf·install·-y·"aide" |
| 190 | fi | 185 | fi |
| 191 | else | 186 | else |
| 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 193 | fi | 188 | fi |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 194 | include·install_aide | ||
| 199 | 195 | class·install_aide·{ | |
| 196 | ··package·{·'aide': | ||
| 197 | ····ensure·=>·'installed', | ||
| 198 | ··} | ||
| 199 | } | ||
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 201 | Run·the·following·command·to·generate·a·new·database: | 201 | Run·the·following·command·to·generate·a·new·database: |
| 202 | $·sudo·/usr/sbin/aide·--init | 202 | $·sudo·/usr/sbin/aide·--init |
| 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 203 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 204 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 205 | To·initiate·a·manual·check,·run·the·following·command: | 205 | To·initiate·a·manual·check,·run·the·following·command: |
| 206 | $·sudo·/usr/sbin/aide·--check | 206 | $·sudo·/usr/sbin/aide·--check |
| Offset 672, 39 lines modified | Offset 672, 14 lines modified | ||
| 672 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 672 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 673 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 673 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 674 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 674 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 675 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 675 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 676 | ············_\x8c_\x8i_\x8s······1.6.1 | 676 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 677 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 677 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 678 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 678 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 488644/495303 bytes (98.66%) of diff not shown. | |||
| Offset 14413, 16 lines modified | Offset 14413, 16 lines modified | ||
| 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 000384c0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 000384d0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 000384e0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 000384f0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00038500:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00038510:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038520:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038530:·2861·7320·6f66·2032·3032·3 | 00038530:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00038540:·3 | 00038540:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00038550:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00038560:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00038570:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00038580:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00038590:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 000385a0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 000385b0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15201, 235 lines modified | Offset 15201, 235 lines modified | ||
| 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | 0003b600:·7461·7267·6574·3d22·2369·646d·3834·3238··target="#idm8428 | ||
| 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b610:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b620:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b630:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b640:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b650:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b660:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b670:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b680:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b690:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b6a0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b6 | 0003b670:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b680:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b690:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b6a0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b6b0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b6c0:·3d22·6964·6d38·3432·3822·3e3c·7072·653e··="idm8428"><pre> | |||
| 0003b6d0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b6e0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b6f0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b700:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b | 0003b710:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b6d0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b6e0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b6f0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b700:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b7 | 0003b720:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b730:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b740:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b750:·3d22·2369·646d·3834·3239·2220·7461·6269··="#idm8429"·tabi | |||
| 0003b760:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b770:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b780:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b790:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7b0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003b7c0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003b7d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b7e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b7f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b800:·643d·2269·646d·3834·3239·223e·3c74·6162··d="idm8429"><tab | |||
| 0003b810:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b820:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b830:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b840:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b850:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b860:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b870:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b880:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003b890:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003b8a0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003b8b0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b8c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b8d0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b8e0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b8f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b900:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003b910:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003b920:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b930:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b940:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b950:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b960:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b970:·3330·2220·7461·6269·6e64·6578·3d22·3022··30"·tabindex="0" | |||
| 0003b980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b9a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b9b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b9c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b9d0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003b9e0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b9f0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ba00:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ba10:·2269·646d·3834·3330·223e·3c74·6162·6c65··"idm8430"><table | |||
| 0003ba20:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003ba30:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003ba40:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003ba50:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003ba60:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003ba70:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003ba80:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003ba90:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003baa0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bab0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bac0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003bad0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003bae0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003baf0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003bb00:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003bb10:·653e·0a70·6163·6b61·6765·2069·6e73·7461··e>.package·insta | |||
| 0003bb20:·6c6c·2061·6964·650a·3c2f·636f·6465·3e3c··ll·aide.</code>< | |||
| 0003bb30:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bb40:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bb50:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bb60:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bb70:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003bb80:·3331·2220·7461·6269·6e64·6578·3d22·3022··31"·tabindex="0" | |||
| 0003bb90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bba0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bbb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bbc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bbd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bbe0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003bbf0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003bc00:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bc10:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bc20:·6170·7365·2220·6964·3d22·6964·6d38·3433··apse"·id="idm843 | |||
| 0003bc30:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003bc40:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bc50:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| Max diff block lines reached; 4321396/4353742 bytes (99.26%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 72 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8c_\x8i_\x8s············6.1.1 | 126 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 128 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 144, 38 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | include·install_aide | ||
| 157 | class·install_aide·{ | ||
| 158 | ··package·{·'aide': | ||
| 159 | ····ensure·=>·'installed', | ||
| 160 | ··} | ||
| 161 | } | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 178, 26 lines modified | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | 178 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 184 | ····dnf·install·-y·"aide" | 179 | ····dnf·install·-y·"aide" |
| 185 | fi | 180 | fi |
| 186 | else | 181 | else |
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 188 | fi | 183 | fi |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | ||
| 194 | 190 | class·install_aide·{ | |
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 200 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 201 | $·sudo·/usr/sbin/aide·--check |
| Offset 667, 39 lines modified | Offset 667, 14 lines modified | ||
| 667 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 667 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 668 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 668 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 669 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 669 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 670 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 670 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 671 | ············_\x8c_\x8i_\x8s······1.6.1 | 671 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 672 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 672 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 673 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 673 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 674 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 675 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 676 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 677 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 346266/352935 bytes (98.11%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038550:·303 | 00038550:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15192, 236 lines modified | Offset 15192, 236 lines modified | ||
| 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | 0003b580:·646d·3834·3238·2220·7461·6269·6e64·6578··dm8428"·tabindex | ||
| 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b5e0:·6d65·6469·6174·696f·6e20·4 | 0003b5e0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b5f0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b600:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b610:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b620:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b630:·6d38·3432·3822·3e3c·7461·626c·6520·636c··m8428"><table·cl | |||
| 0003b640:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b650:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b660:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b670:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b | 0003b5f0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b600:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b610:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b620:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b630:·7365·2220·6964·3d22·6964·6d38·3432·3822··se"·id="idm8428" | |||
| 0003b640:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b650:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b660:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b670:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b680:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b690:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b6a0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b6b0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b6c0:·7461·7267·6574·3d22·2369·646d·3834·3239··target="#idm8429 | |||
| 0003b6d0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b6e0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b6f0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b700:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b710:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b720:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b730:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003b740:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b750:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b760:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b770:·7073·6522·2069·643d·2269·646d·3834·3239··pse"·id="idm8429 | |||
| 0003b780:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b790:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b7a0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b7b0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b7c0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b7d0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b7e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b7f0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003b800:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003b810:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b820:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b830:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b840:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b850:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b860:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b870:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003b880:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003b890:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b8a0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b8b0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b8c0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b8d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b8e0:·2369·646d·3834·3330·2220·7461·6269·6e64··#idm8430"·tabind | |||
| 0003b8f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b900:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b910:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b920:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b930:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b940:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003b950:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b960:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b970:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b980:·6522·2069·643d·2269·646d·3834·3330·223e··e"·id="idm8430"> | |||
| 0003b990:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b9a0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b9b0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b9c0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b9d0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003b9e0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003b9f0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003b6d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b6e0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003ba00:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003ba10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003ba20:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003ba30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003b710:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b720:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b730:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b740:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b750:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b760:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b770:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b780:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b790:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b7a0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b7b0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b7c0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b7d0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b7e0:·733a·0a20·202d·2043·4a49·532d·352e·3130··s:.··-·CJIS-5.10 | |||
| 0003b7f0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b800:·4947·2d52·4845·4c2d·3039·2d36·3531·3031··IG-RHEL-09-65101 | |||
| 0003b810:·300a·2020·2d20·4e49·5354·2d38·3030·2d35··0.··-·NIST-800-5 | |||
| 0003b820:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b830:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b840:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b850:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b860:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| Max diff block lines reached; 4021896/4054380 bytes (99.20%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 121 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ············_\x8c_\x8i_\x8s············6.1.1 | 125 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 127 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·--add=aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·install·aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 150 | ··package: |
| Offset 143, 38 lines modified | Offset 162, 14 lines modified | ||
| 143 | ··-·PCI-DSSv4-11.5.2 | 162 | ··-·PCI-DSSv4-11.5.2 |
| 144 | ··-·enable_strategy | 163 | ··-·enable_strategy |
| 145 | ··-·low_complexity | 164 | ··-·low_complexity |
| 146 | ··-·low_disruption | 165 | ··-·low_disruption |
| 147 | ··-·medium_severity | 166 | ··-·medium_severity |
| 148 | ··-·no_reboot_needed | 167 | ··-·no_reboot_needed |
| 149 | ··-·package_aide_installed | 168 | ··-·package_aide_installed |
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | include·install_aide | ||
| 156 | class·install_aide·{ | ||
| 157 | ··package·{·'aide': | ||
| 158 | ····ensure·=>·'installed', | ||
| 159 | ··} | ||
| 160 | } | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 170 | package·install·aide | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 174 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 175 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 182, 21 lines modified | Offset 177, 26 lines modified | ||
| 182 | if·!·rpm·-q·--quiet·"aide"·;·then | 177 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 183 | ····dnf·install·-y·"aide" | 178 | ····dnf·install·-y·"aide" |
| 184 | fi | 179 | fi |
| 185 | else | 180 | else |
| 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 187 | fi | 182 | fi |
| 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 188 | include·install_aide | ||
| 193 | 189 | class·install_aide·{ | |
| 190 | ··package·{·'aide': | ||
| 191 | ····ensure·=>·'installed', | ||
| 192 | ··} | ||
| 193 | } | ||
| 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 194 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 195 | Run·the·following·command·to·generate·a·new·database: | 195 | Run·the·following·command·to·generate·a·new·database: |
| 196 | $·sudo·/usr/sbin/aide·--init | 196 | $·sudo·/usr/sbin/aide·--init |
| 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 198 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 199 | To·initiate·a·manual·check,·run·the·following·command: | 199 | To·initiate·a·manual·check,·run·the·following·command: |
| 200 | $·sudo·/usr/sbin/aide·--check | 200 | $·sudo·/usr/sbin/aide·--check |
| Offset 666, 39 lines modified | Offset 666, 14 lines modified | ||
| 666 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 666 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 667 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 667 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 668 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 668 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 669 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 670 | ············_\x8c_\x8i_\x8s······1.6.1 | 670 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 671 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 672 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 672 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 673 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 674 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 675 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 676 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 316649/323249 bytes (97.96%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000384d0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000384e0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000384f0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038500:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038510:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038520:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038540:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038550:·303 | 00038550:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038560:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038570:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038580:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00038590:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000385a0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000385b0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000385c0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15224, 235 lines modified | Offset 15224, 235 lines modified | ||
| 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | 0003b770:·6172·6765·743d·2223·6964·6d38·3432·3822··arget="#idm8428" | ||
| 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003b780:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003b790:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003b7a0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003b7b0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003b7c0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003b7d0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003b7e0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b7f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b800:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b810:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b820:·6522·2069·643d·2269·646d·3834·3238·223e··e"·id="idm8428"> | |||
| 0003b830:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b840:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b850:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b860:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b | 0003b7e0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003b7f0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003b800:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b810:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b820:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b830:·2269·646d·3834·3238·223e·3c70·7265·3e3c··"idm8428"><pre>< | |||
| 0003b840:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003b850:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003b860:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003b870:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b880:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b890:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b8a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b8b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b8c0:·2223·6964·6d38·3432·3922·2074·6162·696e··"#idm8429"·tabin | |||
| 0003b8d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b8e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b8f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b900:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b910:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b920:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003b930:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003b940:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b950:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b960:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b970:·3d22·6964·6d38·3432·3922·3e3c·7461·626c··="idm8429"><tabl | |||
| 0003b980:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b990:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b9a0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b9b0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b9c0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b9d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b9e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b9f0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ba00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba10:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ba20:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ba30:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003ba40:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b890:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003ba50:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003ba60:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ba70:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003ba80:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003ba90:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003baa0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bab0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bac0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bad0:·2d74·6172·6765·743d·2223·6964·6d38·3433··-target="#idm843 | |||
| 0003bae0:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003baf0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bb00:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bb10:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bb20:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bb30:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bb40:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003bb50:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bb60:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb70:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bb80:·6964·6d38·3433·3022·3e3c·7461·626c·6520··idm8430"><table· | |||
| 0003bb90:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bba0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bbb0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bbc0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bbd0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003bbe0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003bbf0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b8d0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b8e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b8f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b900:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b910:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b920:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b930:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b940:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b950:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b960:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b970:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b980:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b990:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b9a0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b9b0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b9c0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b9d0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b9e0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b9f0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003ba00:·2d30·392d·3635·3130·3130·0a20·202d·204e··-09-651010.··-·N | |||
| 0003ba10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003ba20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003ba30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003ba40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003ba50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003ba60:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003ba70:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| Max diff block lines reached; 7391303/7423649 bytes (99.56%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ··············Workstation | 60 | ··············Workstation |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 126, 14 lines modified | Offset 126, 33 lines modified | ||
| 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 126 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 127 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 128 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ············_\x8c_\x8i_\x8s············6.1.1 | 130 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 132 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | package·--add=aide | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | package·install·aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 154 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 155 | ··package: |
| Offset 148, 38 lines modified | Offset 167, 14 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 167 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 168 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 169 | ··-·low_complexity |
| 151 | ··-·low_disruption | 170 | ··-·low_disruption |
| 152 | ··-·medium_severity | 171 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 172 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 173 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | include·install_aide | ||
| 161 | class·install_aide·{ | ||
| 162 | ··package·{·'aide': | ||
| 163 | ····ensure·=>·'installed', | ||
| 164 | ··} | ||
| 165 | } | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 175 | package·install·aide | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 181 | #·Remediation·is·applicable·only·in·certain·platforms | 179 | #·Remediation·is·applicable·only·in·certain·platforms |
| 182 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 180 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 187, 21 lines modified | Offset 182, 26 lines modified | ||
| 187 | if·!·rpm·-q·--quiet·"aide"·;·then | 182 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 188 | ····dnf·install·-y·"aide" | 183 | ····dnf·install·-y·"aide" |
| 189 | fi | 184 | fi |
| 190 | else | 185 | else |
| 191 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 186 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 192 | fi | 187 | fi |
| 193 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 188 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 194 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 189 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 195 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 190 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 196 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 191 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 197 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 192 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 193 | include·install_aide | ||
| 198 | 194 | class·install_aide·{ | |
| 195 | ··package·{·'aide': | ||
| 196 | ····ensure·=>·'installed', | ||
| 197 | ··} | ||
| 198 | } | ||
| 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 199 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 200 | Run·the·following·command·to·generate·a·new·database: | 200 | Run·the·following·command·to·generate·a·new·database: |
| 201 | $·sudo·/usr/sbin/aide·--init | 201 | $·sudo·/usr/sbin/aide·--init |
| 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 202 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 203 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 204 | To·initiate·a·manual·check,·run·the·following·command: | 204 | To·initiate·a·manual·check,·run·the·following·command: |
| 205 | $·sudo·/usr/sbin/aide·--check | 205 | $·sudo·/usr/sbin/aide·--check |
| Offset 671, 39 lines modified | Offset 671, 14 lines modified | ||
| 671 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 671 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 672 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 672 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 673 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 673 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 674 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 675 | ············_\x8c_\x8i_\x8s······1.6.1 | 675 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 676 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 676 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 680 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 681 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 471970/478570 bytes (98.62%) of diff not shown. | |||
| Offset 14449, 15 lines modified | Offset 14449, 15 lines modified | ||
| 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038700:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038710:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038720:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038730:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038740:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038750:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038760:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00038770:·3032·3 | 00038770:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00038780:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00038790:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000387a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000387b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000387c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000387d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 000387e0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15647, 262 lines modified | Offset 15647, 262 lines modified | ||
| 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | 0003d1e0:·6574·3d22·2369·646d·3839·3834·2220·7461··et="#idm8984"·ta | ||
| 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003d1f0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003d200:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003d210:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003d220:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003d230:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003d240:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003d250:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003d260:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003d270:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003d280:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003d290:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003d2a0:·6d38·3938·3422·3e3c·7072·653e·3c63·6f64··m8984"><pre><cod | |||
| 0003d2b0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0003d2c0:·6e73·5d0a·6669·7073·203d·2074·7275·650a··ns].fips·=·true. | |||
| 0003d2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003d2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003d2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003d300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003d310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003d320:·3d22·2369·646d·3839·3835·2220·7461·6269··="#idm8985"·tabi | |||
| 0003d330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003d340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003d350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003d360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003d370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003d380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003d | 0003d390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003d | 0003d3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003d | 0003d3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003d | 0003d3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003d | 0003d3d0:·3d22·6964·6d38·3938·3522·3e3c·7461·626c··="idm8985"><tabl | ||
| 0003d | 0003d3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0003d | 0003d3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0003d | 0003d400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0003d | 0003d410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0003d | 0003d420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0003d | 0003d430:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | ||
| 0003d440:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d450:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003d460:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0003d470:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003d480:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0003d | 0003d490:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003d310:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003d320:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0003d330:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003d340:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e74··eboot:</th><td>t | |||
| 0003d350:·7275·653c·2f74·643e·3c2f·7472·3e3c·7472··rue</td></tr><tr | |||
| 0003d | 0003d4a0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003d | 0003d4b0:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | ||
| 0003d | 0003d4c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003d | 0003d4d0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003d | 0003d4e0:·3a20·5843·4344·4620·5661·6c75·6520·7661··:·XCCDF·Value·va | ||
| 0003d | 0003d4f0:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003d | 0003d500:·706f·6c69·6379·2023·2070·726f·6d6f·7465··policy·#·promote | ||
| 0003d | 0003d510:·2074·6f20·7661·7269·6162·6c65·0a20·2073···to·variable.··s | ||
| 0003d | 0003d520:·6574·5f66·6163·743a·0a20·2020·2076·6172··et_fact:.····var | ||
| 0003d | 0003d530:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003d | 0003d540:·6f6c·6963·793a·2021·2173·7472·203c·6162··olicy:·!!str·<ab | ||
| 0003d | 0003d550:·6272·2074·6974·6c65·3d22·6672·6f6d·2050··br·title="from·P | ||
| 0003d | 0003d560:·726f·6669·6c65·2f72·6566·696e·652d·7661··rofile/refine-va | ||
| 0003d | 0003d570:·6c75·653a·2078·6363·6466·5f6f·7267·2e73··lue:·xccdf_org.s | ||
| 0003d | 0003d580:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 0003d | 0003d590:·745f·7661·6c75·655f·7661·725f·7379·7374··t_value_var_syst | ||
| 0003d | 0003d5a0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003d | 0003d5b0:·223e·4649·5053·3c2f·6162·6272·3e0a·2020··">FIPS</abbr>.·· | ||
| 0003d | 0003d5c0:·7461·6773·3a0a·2020·2020·2d20·616c·7761··tags:.····-·alwa | ||
| 0003d | 0003d5d0:·7973·0a0a·2d20·6e61·6d65·3a20·456e·6162··ys..-·name:·Enab | ||
| 0003d | 0003d5e0:·6c65·2046·4950·5320·4d6f·6465·202d·2043··le·FIPS·Mode·-·C | ||
| 0003d | 0003d5f0:·6865·636b·2074·6f20·5365·6520·7468·6520··heck·to·See·the· | ||
| 0003d | 0003d600:·4375·7272·656e·7420·5374·6174·7573·206f··Current·Status·o | ||
| 0003d | 0003d610:·6620·4649·5053·204d·6f64·650a·2020·616e··f·FIPS·Mode.··an | ||
| 0003d | 0003d620:·7369·626c·652e·6275·696c·7469·6e2e·636f··sible.builtin.co | ||
| 0003d | 0003d630:·6d6d·616e·643a·202f·7573·722f·6269·6e2f··mmand:·/usr/bin/ | ||
| 0003d | 0003d640:·6669·7073·2d6d·6f64·652d·7365·7475·7020··fips-mode-setup· | ||
| 0003d | 0003d650:·2d2d·6368·6563·6b0a·2020·7265·6769·7374··--check.··regist | ||
| 0003d | 0003d660:·6572·3a20·6973·5f66·6970·735f·656e·6162··er:·is_fips_enab | ||
| 0003d | 0003d670:·6c65·640a·2020·6661·696c·6564·5f77·6865··led.··failed_whe | ||
| 0003d | 0003d680:·6e3a·2066·616c·7365·0a20·2063·6861·6e67··n:·false.··chang | ||
| 0003d | 0003d690:·6564·5f77·6865·6e3a·2066·616c·7365·0a20··ed_when:·false.· | ||
| 0003d | 0003d6a0:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | ||
| 0003d570:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003d580:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003d590:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003d5a0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003d5b0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003d5c0:·6572·225d·0a20·2020·2061·6e64·206e·6f74··er"].····and·not | |||
| 0003d5d0:·2028·206c·6f6f·6b75·7028·2265·6e76·222c···(·lookup("env", | |||
| 0003d5e0:·2022·636f·6e74·6169·6e65·7222·2920·3d3d···"container")·== | |||
| 0003d5f0:·2022·6277·7261·702d·6f73·6275·696c·6422···"bwrap-osbuild" | |||
| 0003d600:·2029·2029·0a20·202d·2061·6e73·6962·6c65···)·).··-·ansible | |||
| 0003d610:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003d620:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003d630:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003d640:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003d650:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003d660:·2074·6167·733a·0a20·202d·2044·4953·412d···tags:.··-·DISA- | |||
| 0003d670:·5354·4947·2d52·4845·4c2d·3039·2d36·3731··STIG-RHEL-09-671 | |||
| 0003d680:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003d690:·2d35·332d·434d·2d33·2836·290a·2020·2d20··-53-CM-3(6).··-· | |||
| 0003d6a0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003d6b0:·2861·290a·2020·2d20·4e49·5354·2d38·3030··(a).··-·NIST-800 | |||
| 0003d6c0:·2d35·332d·4941·2d37·0a20·202d·204e·4953··-53-IA-7.··-·NIS | |||
| 0003d6d0:·542d·3830·302d·3533·2d53·432d·3132·0a20··T-800-53-SC-12.· | |||
| 0003d6e0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 0003d6f0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 0003d700:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 0003d710:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003d720:·2d53·432d·3133·0a20·202d·2065·6e61·626c··-SC-13.··-·enabl | |||
| 0003d730:·655f·6669·7073·5f6d·6f64·650a·2020·2d20··e_fips_mode.··-· | |||
| Max diff block lines reached; 3669096/3705030 bytes (99.03%) of diff not shown. | |||
| Offset 68, 15 lines modified | Offset 68, 15 lines modified | ||
| 68 | ··············Systems·and·Organizations·(NIST·800-171) | 68 | ··············Systems·and·Organizations·(NIST·800-171) |
| 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 69 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 70 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 71 | ····*·cpe:/o:redhat:enterprise_linux:9 | 71 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 72 | ····*·cpe:/o:centos:centos:9 | 72 | ····*·cpe:/o:centos:centos:9 |
| 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 73 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 74 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 75 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 76 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 78 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 79 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 80 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 81 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 82 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 219, 14 lines modified | Offset 219, 18 lines modified | ||
| 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 219 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 220 | ············_\x8i_\x8s_\x8m······1446 | 220 | ············_\x8i_\x8s_\x8m······1446 |
| 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 221 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 222 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 223 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 224 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 225 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 227 | [customizations] | ||
| 228 | fips·=·true | ||
| 226 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 229 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 227 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 230 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 228 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 231 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 229 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 232 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 230 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 233 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 231 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 234 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 232 | ··set_fact: | 235 | ··set_fact: |
| Offset 326, 18 lines modified | Offset 330, 14 lines modified | ||
| 326 | ··-·NIST-800-53-SC-13 | 330 | ··-·NIST-800-53-SC-13 |
| 327 | ··-·enable_fips_mode | 331 | ··-·enable_fips_mode |
| 328 | ··-·high_severity | 332 | ··-·high_severity |
| 329 | ··-·medium_complexity | 333 | ··-·medium_complexity |
| 330 | ··-·medium_disruption | 334 | ··-·medium_disruption |
| 331 | ··-·reboot_required | 335 | ··-·reboot_required |
| 332 | ··-·restrict_strategy | 336 | ··-·restrict_strategy |
| 333 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 334 | [customizations] | ||
| 335 | fips·=·true | ||
| 336 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 337 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 337 | #·Remediation·is·applicable·only·in·certain·platforms | 338 | #·Remediation·is·applicable·only·in·certain·platforms |
| 338 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 339 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 339 | var_system_crypto_policy='FIPS' | 340 | var_system_crypto_policy='FIPS' |
| Offset 376, 14 lines modified | Offset 376, 33 lines modified | ||
| 376 | $·sudo·dnf·install·crypto-policies | 376 | $·sudo·dnf·install·crypto-policies |
| 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 377 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 378 | Severity: ··medium | 378 | Severity: ··medium |
| 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 379 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 380 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 381 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 382 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 384 | [[packages]] | ||
| 385 | name·=·"crypto-policies" | ||
| 386 | version·=·"*" | ||
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | package·--add=crypto-policies | ||
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 398 | package·install·crypto-policies | ||
| 383 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 384 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 385 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 386 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 387 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 388 | -·name:·Ensure·crypto-policies·is·installed | 404 | -·name:·Ensure·crypto-policies·is·installed |
| 389 | ··package: | 405 | ··package: |
| Offset 393, 54 lines modified | Offset 412, 35 lines modified | ||
| 393 | ··-·DISA-STIG-RHEL-09-672010 | 412 | ··-·DISA-STIG-RHEL-09-672010 |
| 394 | ··-·enable_strategy | 413 | ··-·enable_strategy |
| 395 | ··-·low_complexity | 414 | ··-·low_complexity |
| 396 | ··-·low_disruption | 415 | ··-·low_disruption |
| 397 | ··-·medium_severity | 416 | ··-·medium_severity |
| 398 | ··-·no_reboot_needed | 417 | ··-·no_reboot_needed |
| 399 | ··-·package_crypto-policies_installed | 418 | ··-·package_crypto-policies_installed |
| 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 401 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 402 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 403 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 404 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 405 | include·install_crypto-policies | ||
| 406 | class·install_crypto-policies·{ | ||
| 407 | ··package·{·'crypto-policies': | ||
| 408 | ····ensure·=>·'installed', | ||
| 409 | ··} | ||
| 410 | } | ||
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 412 | [[packages]] | ||
| 413 | name·=·"crypto-policies" | ||
| 414 | version·=·"*" | ||
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 420 | package·install·crypto-policies | ||
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 426 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 424 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 427 | ····dnf·install·-y·"crypto-policies" | 425 | ····dnf·install·-y·"crypto-policies" |
| Max diff block lines reached; 397609/403491 bytes (98.54%) of diff not shown. | |||
| Offset 14414, 16 lines modified | Offset 14414, 16 lines modified | ||
| 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 000384d0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 000384e0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 000384f0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038500:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038510:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038520:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038530:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038540:·2020·2028·6173·206f·6620·3230·323 | 00038540:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00038550:·3 | 00038550:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00038560:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00038570:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00038580:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00038590:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000385a0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000385b0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 000385c0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 17289, 251 lines modified | Offset 17289, 251 lines modified | ||
| 00043880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00043880:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00043890:·3d22·2369·646d·3931·3837·2220·7461·6269··="#idm9187"·tabi | 00043890:·3d22·2369·646d·3931·3837·2220·7461·6269··="#idm9187"·tabi | ||
| 000438a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 000438a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 000438b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 000438b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 000438c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 000438c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 000438d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 000438d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 000438e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 000438e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 000438f0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 000438f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 00043900:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00043910:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00043920:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00043930:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043940:·3d22·6964·6d39·3138·3722·3e3c·7461·626c··="idm9187"><tabl | |||
| 00043950:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00043960:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00043970:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00043980:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00043990:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00043900:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00043910:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00043920:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00043930:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00043940:·2069·643d·2269·646d·3931·3837·223e·3c74···id="idm9187"><t | |||
| 00043950:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00043960:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00043970:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00043980:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00043990:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000439a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 000439b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000439c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 000439 | 000439a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 000439e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000439 | 000439b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 000439c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000439d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000439e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 000439f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00043a00:· | 00043a00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 00043a10:· | 00043a10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 00043a20:· | 00043a20:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 00043a30:· | 00043a30:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 00043a40:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 00043a50:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 00043a60:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 00043a70:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 00043a80:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 00043a90:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 00043aa0:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 00043ab0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 00043ac0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 00043ad0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 00043ae0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 00043af0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 00043b00:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 00043b10:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 00043b20:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 00043b30:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 00043b40:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 00043b50:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 00043b60:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 00043b70:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 00043b80:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 00043b90:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 00043ba0:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 00043bb0:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 00043bc0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 00043bd0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 00043be0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 00043bf0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 00043c00:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 00043c10:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 00043c20:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 00043c30:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 00043c40:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 00043c50:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00043c60:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00043c70:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00043c80:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00043c90:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00043ca0:·2369·646d·3931·3838·2220·7461·6269·6e64··#idm9188"·tabind | |||
| 00043cb0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00043cc0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00043cd0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00043ce0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00043cf0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00043d00:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 00043d10:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00043d20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00043d30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00043d40:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00043d50:·6964·6d39·3138·3822·3e3c·7461·626c·6520··idm9188"><table· | |||
| 00043d60:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00043d70:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00043d80:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00043d90:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00043da0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00043db0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00043dc0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00043dd0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00043de0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00043df0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00043e00:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00043e10:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00043e20:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 00043e30:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 00043e40:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00043 | 00043a40:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | ||
| 00043 | 00043a50:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 00043 | 00043a60:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| Max diff block lines reached; 2726768/2761322 bytes (98.75%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 573, 39 lines modified | Offset 573, 14 lines modified | ||
| 573 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 573 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 574 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 574 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 575 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 575 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 577 | ············_\x8c_\x8i_\x8s······1.6.1 | 577 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 578 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 578 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 579 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 579 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 585 | --- | ||
| 586 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 587 | kind:·MachineConfig | ||
| 588 | spec: | ||
| 589 | ··config: | ||
| 590 | ····ignition: | ||
| 591 | ······version:·3.1.0 | ||
| 592 | ····systemd: | ||
| 593 | ······units: | ||
| 594 | ········-·name:·configure-crypto-policy.service | ||
| 595 | ··········enabled:·true | ||
| 596 | ··········contents:·| | ||
| 597 | ············[Unit] | ||
| 598 | ············Before=kubelet.service | ||
| 599 | ············[Service] | ||
| 600 | ············Type=oneshot | ||
| 601 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 602 | ············RemainAfterExit=yes | ||
| 603 | ············[Install] | ||
| 604 | ············WantedBy=multi-user.target | ||
| 605 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 606 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 607 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 608 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 609 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 610 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 585 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 611 | ··set_fact: | 586 | ··set_fact: |
| Offset 673, 14 lines modified | Offset 648, 39 lines modified | ||
| 673 | » echo·"to·see·what·package·to·(re)install"·>&2 | 648 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 674 | » false··#·end·with·an·error·code | 649 | » false··#·end·with·an·error·code |
| 675 | elif·test·"$rc"·!=·0;·then | 650 | elif·test·"$rc"·!=·0;·then |
| 676 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 651 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 677 | » false··#·end·with·an·error·code | 652 | » false··#·end·with·an·error·code |
| 678 | fi | 653 | fi |
| 654 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 655 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 656 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 657 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 658 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 659 | --- | ||
| 660 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 661 | kind:·MachineConfig | ||
| 662 | spec: | ||
| 663 | ··config: | ||
| 664 | ····ignition: | ||
| 665 | ······version:·3.1.0 | ||
| 666 | ····systemd: | ||
| 667 | ······units: | ||
| 668 | ········-·name:·configure-crypto-policy.service | ||
| 669 | ··········enabled:·true | ||
| 670 | ··········contents:·| | ||
| 671 | ············[Unit] | ||
| 672 | ············Before=kubelet.service | ||
| 673 | ············[Service] | ||
| 674 | ············Type=oneshot | ||
| 675 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 676 | ············RemainAfterExit=yes | ||
| 677 | ············[Install] | ||
| 678 | ············WantedBy=multi-user.target | ||
| 679 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 679 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 680 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 680 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 681 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 681 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 682 | Severity: ··medium | 682 | Severity: ··medium |
| 683 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 683 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 684 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 684 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 685 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 685 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1013, 14 lines modified | Offset 1013, 33 lines modified | ||
| 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 1013 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1014 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1015 | The·rear·package·can·be·installed·with·the·following·command: | 1015 | The·rear·package·can·be·installed·with·the·following·command: |
| 1016 | $·sudo·dnf·install·rear | 1016 | $·sudo·dnf·install·rear |
| 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1017 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1018 | Severity: ·medium | 1018 | Severity: ·medium |
| 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 1019 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1021 | [[packages]] | ||
| 1022 | name·=·"rear" | ||
| 1023 | version·=·"*" | ||
| 1024 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1025 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1026 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1027 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1028 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1029 | package·--add=rear | ||
| 1030 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1031 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1032 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1033 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1034 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1035 | package·install·rear | ||
| 1020 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1036 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1021 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1037 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1022 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1038 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1023 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1039 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1024 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1040 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 172359/178741 bytes (96.43%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038610:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038620:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038630:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038640:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038650:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038660:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038670:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038680:·6173·206f·6620·3230·323 | 00038680:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038690:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 000386a0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000386b0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000386c0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000386d0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000386e0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000386f0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16698, 249 lines modified | Offset 16698, 249 lines modified | ||
| 00041390:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | 00041390:·2d74·6172·6765·743d·2223·6964·6d39·3138··-target="#idm918 | ||
| 000413a0:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | 000413a0:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | ||
| 000413b0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 000413b0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000413c0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000413c0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000413d0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000413d0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 000413e0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 000413e0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 000413f0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 000413f0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00041400:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00041410:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00041420:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00041430:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00041440:·7073·6522·2069·643d·2269·646d·3931·3837··pse"·id="idm9187 | |||
| 00041450:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00041460:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00041400:·7469·6f6e·204b·7562·6572·6e65·7465·7320··tion·Kubernetes· | |||
| 00041410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00041420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00041430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00041440:·6c6c·6170·7365·2220·6964·3d22·6964·6d39··llapse"·id="idm9 | |||
| 00041450:·3138·3722·3e3c·7461·626c·6520·636c·6173··187"><table·clas | |||
| 00041460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00041470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000414 | 00041470:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 00041490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 000414a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000414b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000414 | 00041480:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 00041490:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000414a0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000414b0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000414c0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000414d0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000414e0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000414 | 000414f0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 000414e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000414f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00041500:· | 00041500:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 00041510:· | 00041510:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 00041520:· | 00041520:·7468·3e3c·7464·3e72·6573·7472·6963·743c··th><td>restrict< | ||
| 00041530:· | 00041530:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00041540:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d2d··le><pre><code>-- | |||
| 00041550:·2d0a·6170·6956·6572·7369·6f6e·3a20·6d61··-.apiVersion:·ma | |||
| 00041560:·6368·696e·6563·6f6e·6669·6775·7261·7469··chineconfigurati | |||
| 00041570:·6f6e·2e6f·7065·6e73·6869·6674·2e69·6f2f··on.openshift.io/ | |||
| 00041580:·7631·0a6b·696e·643a·204d·6163·6869·6e65··v1.kind:·Machine | |||
| 00041590:·436f·6e66·6967·0a73·7065·633a·0a20·2063··Config.spec:.··c | |||
| 000415a0:·6f6e·6669·673a·0a20·2020·2069·676e·6974··onfig:.····ignit | |||
| 000415b0:·696f·6e3a·0a20·2020·2020·2076·6572·7369··ion:.······versi | |||
| 000415c0:·6f6e·3a20·332e·312e·300a·2020·2020·7379··on:·3.1.0.····sy | |||
| 000415d0:·7374·656d·643a·0a20·2020·2020·2075·6e69··stemd:.······uni | |||
| 000415e0:·7473·3a0a·2020·2020·2020·2020·2d20·6e61··ts:.········-·na | |||
| 000415f0:·6d65·3a20·636f·6e66·6967·7572·652d·6372··me:·configure-cr | |||
| 00041600:·7970·746f·2d70·6f6c·6963·792e·7365·7276··ypto-policy.serv | |||
| 00041610:·6963·650a·2020·2020·2020·2020·2020·656e··ice.··········en | |||
| 00041620:·6162·6c65·643a·2074·7275·650a·2020·2020··abled:·true.···· | |||
| 00041630:·2020·2020·2020·636f·6e74·656e·7473·3a20········contents:· | |||
| 00041640:·7c0a·2020·2020·2020·2020·2020·2020·5b55··|.············[U | |||
| 00041650:·6e69·745d·0a20·2020·2020·2020·2020·2020··nit].··········· | |||
| 00041660:·2042·6566·6f72·653d·6b75·6265·6c65·742e···Before=kubelet. | |||
| 00041670:·7365·7276·6963·650a·2020·2020·2020·2020··service.········ | |||
| 00041680:·2020·2020·5b53·6572·7669·6365·5d0a·2020······[Service].·· | |||
| 00041690:·2020·2020·2020·2020·2020·5479·7065·3d6f············Type=o | |||
| 000416a0:·6e65·7368·6f74·0a20·2020·2020·2020·2020··neshot.········· | |||
| 000416b0:·2020·2045·7865·6353·7461·7274·3d75·7064·····ExecStart=upd | |||
| 000416c0:·6174·652d·6372·7970·746f·2d70·6f6c·6963··ate-crypto-polic | |||
| 000416d0:·6965·7320·2d2d·7365·7420·7b7b·2e76·6172··ies·--set·{{.var | |||
| 000416e0:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | |||
| 000416f0:·6f6c·6963·797d·7d0a·2020·2020·2020·2020··olicy}}.········ | |||
| 00041700:·2020·2020·5265·6d61·696e·4166·7465·7245······RemainAfterE | |||
| 00041710:·7869·743d·7965·730a·2020·2020·2020·2020··xit=yes.········ | |||
| 00041720:·2020·2020·5b49·6e73·7461·6c6c·5d0a·2020······[Install].·· | |||
| 00041730:·2020·2020·2020·2020·2020·5761·6e74·6564············Wanted | |||
| 00041740:·4279·3d6d·756c·7469·2d75·7365·722e·7461··By=multi-user.ta | |||
| 00041750:·7267·6574·0a3c·2f63·6f64·653e·3c2f·7072··rget.</code></pr | |||
| 00041760:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00041770:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00041780:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00041790:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 000417a0:·6172·6765·743d·2223·6964·6d39·3138·3822··arget="#idm9188" | |||
| 000417b0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000417c0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000417d0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000417e0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000417f0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00041800:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00041810:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 00041820:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00041830:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00041840:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00041850:·6522·2069·643d·2269·646d·3931·3838·223e··e"·id="idm9188"> | |||
| 00041860:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00041870:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00041880:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00041890:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 000418a0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 000418b0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 000418c0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000418d0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 000418e0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 000418f0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00041900:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 00041910:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 00041920:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 00041930:·3e3c·7464·3e72·6573·7472·6963·743c·2f74··><td>restrict</t | |||
| 00041940:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00041 | 00041540:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 00041 | 00041550:·6d65·3a20·5843·4344·4620·5661·6c75·6520··me:·XCCDF·Value· | ||
| 00041 | 00041560:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 00041 | 00041570:·6f5f·706f·6c69·6379·2023·2070·726f·6d6f··o_policy·#·promo | ||
| 00041 | 00041580:·7465·2074·6f20·7661·7269·6162·6c65·0a20··te·to·variable.· | ||
| 000419 | 00041590:·2073·6574·5f66·6163·743a·0a20·2020·2076···set_fact:.····v | ||
| Max diff block lines reached; 3114813/3148953 bytes (98.92%) of diff not shown. | |||
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 64 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 65 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 66 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 67 | ····*·cpe:/o:redhat:enterprise_linux:9 | 67 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 68 | ····*·cpe:/o:centos:centos:9 | 68 | ····*·cpe:/o:centos:centos:9 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 74 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 75 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 77 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 444, 39 lines modified | Offset 444, 14 lines modified | ||
| 444 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 444 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 445 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 445 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 446 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 446 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 447 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 447 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 448 | ············_\x8c_\x8i_\x8s······1.6.1 | 448 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 449 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 449 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 450 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 450 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 456 | --- | ||
| 457 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 458 | kind:·MachineConfig | ||
| 459 | spec: | ||
| 460 | ··config: | ||
| 461 | ····ignition: | ||
| 462 | ······version:·3.1.0 | ||
| 463 | ····systemd: | ||
| 464 | ······units: | ||
| 465 | ········-·name:·configure-crypto-policy.service | ||
| 466 | ··········enabled:·true | ||
| 467 | ··········contents:·| | ||
| 468 | ············[Unit] | ||
| 469 | ············Before=kubelet.service | ||
| 470 | ············[Service] | ||
| 471 | ············Type=oneshot | ||
| 472 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 473 | ············RemainAfterExit=yes | ||
| 474 | ············[Install] | ||
| 475 | ············WantedBy=multi-user.target | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 481 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 456 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 482 | ··set_fact: | 457 | ··set_fact: |
| Offset 544, 14 lines modified | Offset 519, 39 lines modified | ||
| 544 | » echo·"to·see·what·package·to·(re)install"·>&2 | 519 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 545 | » false··#·end·with·an·error·code | 520 | » false··#·end·with·an·error·code |
| 546 | elif·test·"$rc"·!=·0;·then | 521 | elif·test·"$rc"·!=·0;·then |
| 547 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 522 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 548 | » false··#·end·with·an·error·code | 523 | » false··#·end·with·an·error·code |
| 549 | fi | 524 | fi |
| 525 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 526 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 527 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 528 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 529 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 530 | --- | ||
| 531 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 532 | kind:·MachineConfig | ||
| 533 | spec: | ||
| 534 | ··config: | ||
| 535 | ····ignition: | ||
| 536 | ······version:·3.1.0 | ||
| 537 | ····systemd: | ||
| 538 | ······units: | ||
| 539 | ········-·name:·configure-crypto-policy.service | ||
| 540 | ··········enabled:·true | ||
| 541 | ··········contents:·| | ||
| 542 | ············[Unit] | ||
| 543 | ············Before=kubelet.service | ||
| 544 | ············[Service] | ||
| 545 | ············Type=oneshot | ||
| 546 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 547 | ············RemainAfterExit=yes | ||
| 548 | ············[Install] | ||
| 549 | ············WantedBy=multi-user.target | ||
| 550 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 550 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 551 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 551 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 552 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 552 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 553 | Severity: ··medium | 553 | Severity: ··medium |
| 554 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 554 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 555 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 555 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| 556 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 556 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| Offset 1513, 33 lines modified | Offset 1513, 25 lines modified | ||
| 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 | 1513 | ············_\x8c_\x8u_\x8i·····3.4.5 |
| 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1514 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1515 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1516 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1517 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1518 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1519 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1521 | [customizations.services] | ||
| 1522 | masked·=·["debug-shell"] | ||
| 1523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:· | 1525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:····· | 1526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1528 | service·disable·debug-shell | ||
| 1525 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1526 | kind:·MachineConfig | ||
| 1527 | spec: | ||
| 1528 | ··config: | ||
| 1529 | ····ignition: | ||
| 1530 | ······version:·3.1.0 | ||
| 1531 | ····systemd: | ||
| 1532 | ······units: | ||
| 1533 | ······-·name:·debug-shell.service | ||
| 1534 | ········enabled:·false | ||
| 1535 | ········mask:·true | ||
| 1536 | ······-·name:·debug-shell.socket | ||
| 1537 | ········enabled:·false | ||
| Max diff block lines reached; 146248/152630 bytes (95.82%) of diff not shown. | |||
| Offset 14427, 15 lines modified | Offset 14427, 15 lines modified | ||
| 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000385a0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000385b0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000385c0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000385d0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000385e0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000385f0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038600:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038610:·6173·206f·6620·3230·323 | 00038610:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038620:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038630:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038640:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038650:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038660:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038670:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038680:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 17198, 236 lines modified | Offset 17198, 236 lines modified | ||
| 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 000432d0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | 000432e0:·2223·6964·6d38·3432·3822·2074·6162·696e··"#idm8428"·tabin | ||
| 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 000432f0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00043300:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00043310:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00043320:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00043330:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00043340:·3e52·656d·6564·6961·7469·6f6e·204 | 00043340:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00043350:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00043350:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00043360:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00043370:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00043380:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00043390:·2269·646d·3834·3238·223e·3c74·6162·6c65··"idm8428"><table | |||
| 000433a0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000433b0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000433c0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000433d0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 000433e0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 000433f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043400:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00043410:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00043420:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00043430:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00043440:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00043450:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00043460:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00043470:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00043480:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00043490:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 000434a0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 000434b0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 000434c0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 000434d0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 000434e0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 000434f0:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00043500:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00043510:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00043520:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00043530:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00043540:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 00043550:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 00043560:·2d53·5449·472d·5248·454c·2d30·392d·3635··-STIG-RHEL-09-65 | |||
| 00043570:·3130·3130·0a20·202d·204e·4953·542d·3830··1010.··-·NIST-80 | |||
| 00043580:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 00043590:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 000435a0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 000435b0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 000435c0:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 000435d0:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 000435e0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 000435f0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00043600:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00043610:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00043620:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 00043630:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 00043640:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00043650:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00043660:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00043670:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00043680:·6172·6765·743d·2223·6964·6d38·3432·3922··arget="#idm8429" | |||
| 00043690:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 000436a0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 000436b0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000436c0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000436d0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000436e0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 000436f0:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 00043700:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00043710:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00043720:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00043730:·2220·6964·3d22·6964·6d38·3432·3922·3e3c··"·id="idm8429">< | |||
| 00043740:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00043750:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00043760:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00043770:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00043780:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00043790:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000437a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000437b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 000437c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000437d0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000437e0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 000437f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00043800:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00043810:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00043820:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00043830:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 00043840:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 00043850:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 00043860:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 00043870:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 00043880:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 00043890:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 000438a0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000438b0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000438c0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 000438d0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 000438e0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 000438f0:·3834·3330·2220·7461·6269·6e64·6578·3d22··8430"·tabindex=" | |||
| 00043900:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00043910:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00043920:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00043930:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00043940:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00043950:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 00043960:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00043970:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00043980:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00043990:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 000439a0:·2220·6964·3d22·6964·6d38·3433·3022·3e3c··"·id="idm8430">< | |||
| Max diff block lines reached; 3510312/3542658 bytes (99.09%) of diff not shown. | |||
| Offset 62, 15 lines modified | Offset 62, 15 lines modified | ||
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 63 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 64 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:9 | 65 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 66 | ····*·cpe:/o:centos:centos:9 | 66 | ····*·cpe:/o:centos:centos:9 |
| 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 68 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 69 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 70 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 72 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 73 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 76 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 576, 14 lines modified | Offset 576, 33 lines modified | ||
| 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 576 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 577 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 578 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 579 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 580 | ············_\x8c_\x8i_\x8s············6.1.1 | 580 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 581 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 582 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 584 | [[packages]] | ||
| 585 | name·=·"aide" | ||
| 586 | version·=·"*" | ||
| 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 592 | package·--add=aide | ||
| 593 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 594 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 595 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 596 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 597 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 598 | package·install·aide | ||
| 583 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 584 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 585 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 586 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 587 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 588 | -·name:·Ensure·aide·is·installed | 604 | -·name:·Ensure·aide·is·installed |
| 589 | ··package: | 605 | ··package: |
| Offset 598, 38 lines modified | Offset 617, 14 lines modified | ||
| 598 | ··-·PCI-DSSv4-11.5.2 | 617 | ··-·PCI-DSSv4-11.5.2 |
| 599 | ··-·enable_strategy | 618 | ··-·enable_strategy |
| 600 | ··-·low_complexity | 619 | ··-·low_complexity |
| 601 | ··-·low_disruption | 620 | ··-·low_disruption |
| 602 | ··-·medium_severity | 621 | ··-·medium_severity |
| 603 | ··-·no_reboot_needed | 622 | ··-·no_reboot_needed |
| 604 | ··-·package_aide_installed | 623 | ··-·package_aide_installed |
| 605 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 606 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 607 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 608 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 609 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 610 | include·install_aide | ||
| 611 | class·install_aide·{ | ||
| 612 | ··package·{·'aide': | ||
| 613 | ····ensure·=>·'installed', | ||
| 614 | ··} | ||
| 615 | } | ||
| 616 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 617 | [[packages]] | ||
| 618 | name·=·"aide" | ||
| 619 | version·=·"*" | ||
| 620 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 621 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 622 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 623 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 624 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 625 | package·install·aide | ||
| 626 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 624 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 627 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 625 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 628 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 626 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 629 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 627 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 630 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 628 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 631 | #·Remediation·is·applicable·only·in·certain·platforms | 629 | #·Remediation·is·applicable·only·in·certain·platforms |
| 632 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 630 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 637, 21 lines modified | Offset 632, 26 lines modified | ||
| 637 | if·!·rpm·-q·--quiet·"aide"·;·then | 632 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 638 | ····dnf·install·-y·"aide" | 633 | ····dnf·install·-y·"aide" |
| 639 | fi | 634 | fi |
| 640 | else | 635 | else |
| 641 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 636 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 642 | fi | 637 | fi |
| 643 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 638 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 644 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 639 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 645 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 640 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 646 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 641 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 647 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 642 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 643 | include·install_aide | ||
| 648 | 644 | class·install_aide·{ | |
| 645 | ··package·{·'aide': | ||
| 646 | ····ensure·=>·'installed', | ||
| 647 | ··} | ||
| 648 | } | ||
| 649 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 649 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 650 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 650 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 651 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 651 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 652 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 652 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 653 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 653 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 671, 14 lines modified | Offset 671, 18 lines modified | ||
| 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 671 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 672 | ············_\x8i_\x8s_\x8m······1446 | 672 | ············_\x8i_\x8s_\x8m······1446 |
| 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 677 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 678 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 679 | [customizations] | ||
| 680 | fips·=·true | ||
| Max diff block lines reached; 232462/238811 bytes (97.34%) of diff not shown. | |||
| Offset 14416, 15 lines modified | Offset 14416, 15 lines modified | ||
| 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000384f0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038500:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038510:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038520:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038530:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038540:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038550:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038560:·6173·206f·6620·3230·323 | 00038560:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038570:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038580:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038590:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000385a0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000385b0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000385c0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000385d0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15614, 263 lines modified | Offset 15614, 263 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | 0003cfe0:·2369·646d·3839·3834·2220·7461·6269·6e64··#idm8984"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3422·3e3c·7072·653e·3c63·6f64·653e·0a5b··4"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3835·2220·7461·6269·6e64·6578··dm8985"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d | 0003d180:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003d | 0003d190:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003d | 0003d1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003d | 0003d1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003d | 0003d1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003d | 0003d1d0:·6d38·3938·3522·3e3c·7461·626c·6520·636c··m8985"><table·cl | ||
| 0003d | 0003d1e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003d | 0003d1f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003d | 0003d200:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003d | 0003d210:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003d | 0003d220:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003d | 0003d230:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003d240:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003d250:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d260:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0003d270:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003d280:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003d | 0003d290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003d110:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d120:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003d130:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d140:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003d150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d | 0003d2a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003d | 0003d2b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003d | 0003d2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003d | 0003d2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003d | 0003d2e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003d | 0003d2f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003d | 0003d300:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003d | 0003d310:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003d | 0003d320:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003d | 0003d330:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d340:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | ||
| 0003d | 0003d350:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003d | 0003d360:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003d | 0003d370:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003d | 0003d380:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003d | 0003d390:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 0003d | 0003d3a0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | ||
| 0003d | 0003d3b0:·5053·3a4f·5350·503c·2f61·6262·723e·0a20··PS:OSPP</abbr>.· | ||
| 0003d | 0003d3c0:·2074·6167·733a·0a20·2020·202d·2061·6c77···tags:.····-·alw | ||
| 0003d | 0003d3d0:·6179·730a·0a2d·206e·616d·653a·2045·6e61··ays..-·name:·Ena | ||
| 0003d | 0003d3e0:·626c·6520·4649·5053·204d·6f64·6520·2d20··ble·FIPS·Mode·-· | ||
| 0003d | 0003d3f0:·4368·6563·6b20·746f·2053·6565·2074·6865··Check·to·See·the | ||
| 0003d | 0003d400:·2043·7572·7265·6e74·2053·7461·7475·7320···Current·Status· | ||
| 0003d | 0003d410:·6f66·2046·4950·5320·4d6f·6465·0a20·2061··of·FIPS·Mode.··a | ||
| 0003d | 0003d420:·6e73·6962·6c65·2e62·7569·6c74·696e·2e63··nsible.builtin.c | ||
| 0003d | 0003d430:·6f6d·6d61·6e64·3a20·2f75·7372·2f62·696e··ommand:·/usr/bin | ||
| 0003d | 0003d440:·2f66·6970·732d·6d6f·6465·2d73·6574·7570··/fips-mode-setup | ||
| 0003d | 0003d450:·202d·2d63·6865·636b·0a20·2072·6567·6973···--check.··regis | ||
| 0003d | 0003d460:·7465·723a·2069·735f·6669·7073·5f65·6e61··ter:·is_fips_ena | ||
| 0003d | 0003d470:·626c·6564·0a20·2066·6169·6c65·645f·7768··bled.··failed_wh | ||
| 0003d | 0003d480:·656e·3a20·6661·6c73·650a·2020·6368·616e··en:·false.··chan | ||
| 0003d | 0003d490:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | ||
| 0003d | 0003d4a0:·2020·7768·656e·3a0a·2020·2d20·2820·616e····when:.··-·(·an | ||
| 0003d | 0003d4b0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 0003d | 0003d4c0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 0003d | 0003d4d0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 0003d | 0003d4e0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 0003d | 0003d4f0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 0003d | 0003d500:·7222·5d0a·2020·2020·616e·6420·6e6f·7420··r"].····and·not· | ||
| 0003d | 0003d510:·2820·6c6f·6f6b·7570·2822·656e·7622·2c20··(·lookup("env",· | ||
| 0003d | 0003d520:·2263·6f6e·7461·696e·6572·2229·203d·3d20··"container")·==· | ||
| 0003d | 0003d530:·2262·7772·6170·2d6f·7362·7569·6c64·2220··"bwrap-osbuild"· | ||
| 0003d | 0003d540:·2920·290a·2020·2d20·616e·7369·626c·655f··)·).··-·ansible_ | ||
| 0003d | 0003d550:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 0003d | 0003d560:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 0003d | 0003d570:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 0003d | 0003d580:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 0003d | 0003d590:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 0003d | 0003d5a0:·7461·6773·3a0a·2020·2d20·4449·5341·2d53··tags:.··-·DISA-S | ||
| 0003d | 0003d5b0:·5449·472d·5248·454c·2d30·392d·3637·3130··TIG-RHEL-09-6710 | ||
| 0003d | 0003d5c0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | ||
| 0003d490:·302d·3533·2d43·4d2d·3328·3629·0a20·202d··0-53-CM-3(6).··- | |||
| 0003d4a0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003d4b0:·3628·6129·0a20·202d·204e·4953·542d·3830··6(a).··-·NIST-80 | |||
| 0003d4c0:·302d·3533·2d49·412d·370a·2020·2d20·4e49··0-53-IA-7.··-·NI | |||
| 0003d4d0:·5354·2d38·3030·2d35·332d·5343·2d31·320a··ST-800-53-SC-12. | |||
| 0003d4e0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003d4f0:·5343·2d31·3228·3229·0a20·202d·204e·4953··SC-12(2).··-·NIS | |||
| 0003d500:·542d·3830·302d·3533·2d53·432d·3132·2833··T-800-53-SC-12(3 | |||
| 0003d510:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003d520:·332d·5343·2d31·330a·2020·2d20·656e·6162··3-SC-13.··-·enab | |||
| Max diff block lines reached; 3669717/3705789 bytes (99.03%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:9 | 62 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 63 | ····*·cpe:/o:centos:centos:9 | 63 | ····*·cpe:/o:centos:centos:9 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 73 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 210, 14 lines modified | Offset 210, 18 lines modified | ||
| 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 210 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 211 | ············_\x8i_\x8s_\x8m······1446 | 211 | ············_\x8i_\x8s_\x8m······1446 |
| 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 212 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 213 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 214 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 215 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 216 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 218 | [customizations] | ||
| 219 | fips·=·true | ||
| 217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 222 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 225 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 223 | ··set_fact: | 226 | ··set_fact: |
| Offset 317, 18 lines modified | Offset 321, 14 lines modified | ||
| 317 | ··-·NIST-800-53-SC-13 | 321 | ··-·NIST-800-53-SC-13 |
| 318 | ··-·enable_fips_mode | 322 | ··-·enable_fips_mode |
| 319 | ··-·high_severity | 323 | ··-·high_severity |
| 320 | ··-·medium_complexity | 324 | ··-·medium_complexity |
| 321 | ··-·medium_disruption | 325 | ··-·medium_disruption |
| 322 | ··-·reboot_required | 326 | ··-·reboot_required |
| 323 | ··-·restrict_strategy | 327 | ··-·restrict_strategy |
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 325 | [customizations] | ||
| 326 | fips·=·true | ||
| 327 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 328 | #·Remediation·is·applicable·only·in·certain·platforms | 329 | #·Remediation·is·applicable·only·in·certain·platforms |
| 329 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 330 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 330 | var_system_crypto_policy='FIPS:OSPP' | 331 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 367, 14 lines modified | Offset 367, 33 lines modified | ||
| 367 | $·sudo·dnf·install·crypto-policies | 367 | $·sudo·dnf·install·crypto-policies |
| 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 368 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 369 | Severity: ··medium | 369 | Severity: ··medium |
| 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 370 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 371 | ············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 372 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 373 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 375 | [[packages]] | ||
| 376 | name·=·"crypto-policies" | ||
| 377 | version·=·"*" | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 383 | package·--add=crypto-policies | ||
| 384 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 385 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 386 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 387 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 388 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 389 | package·install·crypto-policies | ||
| 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 379 | -·name:·Ensure·crypto-policies·is·installed | 395 | -·name:·Ensure·crypto-policies·is·installed |
| 380 | ··package: | 396 | ··package: |
| Offset 384, 54 lines modified | Offset 403, 35 lines modified | ||
| 384 | ··-·DISA-STIG-RHEL-09-672010 | 403 | ··-·DISA-STIG-RHEL-09-672010 |
| 385 | ··-·enable_strategy | 404 | ··-·enable_strategy |
| 386 | ··-·low_complexity | 405 | ··-·low_complexity |
| 387 | ··-·low_disruption | 406 | ··-·low_disruption |
| 388 | ··-·medium_severity | 407 | ··-·medium_severity |
| 389 | ··-·no_reboot_needed | 408 | ··-·no_reboot_needed |
| 390 | ··-·package_crypto-policies_installed | 409 | ··-·package_crypto-policies_installed |
| 391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 396 | include·install_crypto-policies | ||
| 397 | class·install_crypto-policies·{ | ||
| 398 | ··package·{·'crypto-policies': | ||
| 399 | ····ensure·=>·'installed', | ||
| 400 | ··} | ||
| 401 | } | ||
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 403 | [[packages]] | ||
| 404 | name·=·"crypto-policies" | ||
| 405 | version·=·"*" | ||
| 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 411 | package·install·crypto-policies | ||
| 412 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 410 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 413 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 411 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 414 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 412 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 415 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 413 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 416 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 414 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 417 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 415 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 418 | ····dnf·install·-y·"crypto-policies" | 416 | ····dnf·install·-y·"crypto-policies" |
| Max diff block lines reached; 397618/403546 bytes (98.53%) of diff not shown. | |||
| Offset 14415, 16 lines modified | Offset 14415, 16 lines modified | ||
| 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000384e0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 000384f0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038500:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038510:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038520:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038530:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038540:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038550:·2020·2020·2028·6173·206f·6620·3230·323 | 00038550:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038560:·2d30·3 | 00038560:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038570:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038580:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038590:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000385a0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000385b0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000385c0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000385d0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 16533, 236 lines modified | Offset 16533, 236 lines modified | ||
| 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 00040940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 00040950:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040960:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040970:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040980:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040990:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 000409a0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 000409b0:·5265·6d65·6469·6174·696f·6e20·4 | 000409b0:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 000409c0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 000409d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000409e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000409f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040a00:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 00040a10:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00040a20:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00040a30:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00040a40:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00040 | 000409c0:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 000409d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000409e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000409f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040a00:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 00040a10:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 00040a20:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 00040a30:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 00040a40:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 00040a50:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040a60:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040a70:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040a80:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040a90:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00040aa0:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | |||
| 00040ab0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040ac0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040ad0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040ae0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040af0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040b00:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 00040b10:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040b20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040b30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040b40:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 00040b50:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 00040b60:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040b70:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040b80:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040b90:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040ba0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00040bb0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040bc0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00040 | 00040bd0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 00040 | 00040be0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00040 | 00040bf0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00040c00:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00040c10:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00040c20:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00040c30:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00040c40:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 00040c50:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 00040c60:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00040c70:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00040c80:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00040c90:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00040ca0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040cb0:·3d22·2369·646d·3834·3330·2220·7461·6269··="#idm8430"·tabi | |||
| 00040cc0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040cd0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040ce0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040cf0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040d00:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040d10:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 00040d20:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040d30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040d40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040d50:·7073·6522·2069·643d·2269·646d·3834·3330··pse"·id="idm8430 | |||
| 00040d60:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040d70:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040d80:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040d90:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040da0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040db0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040 | 00040dc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00040aa0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040ab0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00040ac0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00040ad0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00040ae0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040af0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040b00:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00040b10:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 00040b20:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00040b30:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 00040b40:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 00040b50:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00040b60:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00040b70:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00040b80:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00040b90:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00040ba0:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00040bb0:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 00040bc0:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00040bd0:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 00040be0:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 00040bf0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040c00:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 00040c10:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 00040c20:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 00040c30:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00040c40:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00040c50:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| Max diff block lines reached; 4181664/4214148 bytes (99.23%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 62 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 64 | ····*·cpe:/o:centos:centos:9 | 64 | ····*·cpe:/o:centos:centos:9 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 432, 14 lines modified | Offset 432, 33 lines modified | ||
| 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 432 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 433 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 434 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 435 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 436 | ············_\x8c_\x8i_\x8s············6.1.1 | 436 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 437 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 440 | [[packages]] | ||
| 441 | name·=·"aide" | ||
| 442 | version·=·"*" | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·--add=aide | ||
| 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 454 | package·install·aide | ||
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 444 | -·name:·Ensure·aide·is·installed | 460 | -·name:·Ensure·aide·is·installed |
| 445 | ··package: | 461 | ··package: |
| Offset 454, 38 lines modified | Offset 473, 14 lines modified | ||
| 454 | ··-·PCI-DSSv4-11.5.2 | 473 | ··-·PCI-DSSv4-11.5.2 |
| 455 | ··-·enable_strategy | 474 | ··-·enable_strategy |
| 456 | ··-·low_complexity | 475 | ··-·low_complexity |
| 457 | ··-·low_disruption | 476 | ··-·low_disruption |
| 458 | ··-·medium_severity | 477 | ··-·medium_severity |
| 459 | ··-·no_reboot_needed | 478 | ··-·no_reboot_needed |
| 460 | ··-·package_aide_installed | 479 | ··-·package_aide_installed |
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 466 | include·install_aide | ||
| 467 | class·install_aide·{ | ||
| 468 | ··package·{·'aide': | ||
| 469 | ····ensure·=>·'installed', | ||
| 470 | ··} | ||
| 471 | } | ||
| 472 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 473 | [[packages]] | ||
| 474 | name·=·"aide" | ||
| 475 | version·=·"*" | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 481 | package·install·aide | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 487 | #·Remediation·is·applicable·only·in·certain·platforms | 485 | #·Remediation·is·applicable·only·in·certain·platforms |
| 488 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 493, 21 lines modified | Offset 488, 26 lines modified | ||
| 493 | if·!·rpm·-q·--quiet·"aide"·;·then | 488 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 494 | ····dnf·install·-y·"aide" | 489 | ····dnf·install·-y·"aide" |
| 495 | fi | 490 | fi |
| 496 | else | 491 | else |
| 497 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 492 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 498 | fi | 493 | fi |
| 499 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 500 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 501 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 502 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 503 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 499 | include·install_aide | ||
| 504 | 500 | class·install_aide·{ | |
| 501 | ··package·{·'aide': | ||
| 502 | ····ensure·=>·'installed', | ||
| 503 | ··} | ||
| 504 | } | ||
| 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 505 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 506 | Run·the·following·command·to·generate·a·new·database: | 506 | Run·the·following·command·to·generate·a·new·database: |
| 507 | $·sudo·/usr/sbin/aide·--init | 507 | $·sudo·/usr/sbin/aide·--init |
| 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 508 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 509 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 510 | To·initiate·a·manual·check,·run·the·following·command: | 510 | To·initiate·a·manual·check,·run·the·following·command: |
| 511 | $·sudo·/usr/sbin/aide·--check | 511 | $·sudo·/usr/sbin/aide·--check |
| Offset 806, 39 lines modified | Offset 806, 14 lines modified | ||
| 806 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 806 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 807 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 807 | ············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 808 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 808 | References:·_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 809 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 809 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 810 | ············_\x8c_\x8i_\x8s······1.6.1 | 810 | ············_\x8c_\x8i_\x8s······1.6.1 |
| 811 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 811 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 812 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 812 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 813 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 814 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 815 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 816 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 255854/262516 bytes (97.46%) of diff not shown. | |||
| Offset 14425, 15 lines modified | Offset 14425, 15 lines modified | ||
| 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038580:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038590:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000385a0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000385b0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000385c0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000385d0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 000385e0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 000385f0:·3230·323 | 000385f0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038600:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00038610:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00038620:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00038630:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00038640:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00038650:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00038660:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15227, 236 lines modified | Offset 15227, 236 lines modified | ||
| 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b7a0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | 0003b7b0:·2369·646d·3834·3238·2220·7461·6269·6e64··#idm8428"·tabind | ||
| 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b7c0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b7d0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b7e0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b7f0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b800:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b810:·5265·6d65·6469·6174·696f·6e20·4 | 0003b810:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b820:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b830:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b840:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b850:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b860:·6964·6d38·3432·3822·3e3c·7461·626c·6520··idm8428"><table· | |||
| 0003b870:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b880:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b890:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b8a0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8 | 0003b820:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b830:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b840:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b850:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b860:·6170·7365·2220·6964·3d22·6964·6d38·3432··apse"·id="idm842 | |||
| 0003b870:·3822·3e3c·7072·653e·3c63·6f64·653e·0a5b··8"><pre><code>.[ | |||
| 0003b880:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b890:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b8a0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b8b0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8c0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b8d0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b8e0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b8f0:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b900:·3239·2220·7461·6269·6e64·6578·3d22·3022··29"·tabindex="0" | |||
| 0003b910:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b920:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b930:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b940:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b950:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b960:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b970:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b980:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b990:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9a0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b9b0:·3239·223e·3c74·6162·6c65·2063·6c61·7373··29"><table·class | |||
| 0003b9c0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b9d0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b9e0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b9f0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003ba00:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003ba10:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ba20:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003ba30:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003ba40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003ba50:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003ba60:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003ba70:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003ba80:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003ba90:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003baa0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003bab0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003bac0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bad0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bae0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003baf0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bb00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bb10:·3d22·2369·646d·3834·3330·2220·7461·6269··="#idm8430"·tabi | |||
| 0003bb20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bb30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bb40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bb50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bb60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bb70:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003bb80:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003bb90:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bba0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bbb0:·7073·6522·2069·643d·2269·646d·3834·3330··pse"·id="idm8430 | |||
| 0003bbc0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bbd0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bbe0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bbf0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bc00:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bc10:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003bc20:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003bc30:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003bc40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bc50:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003bc60:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bc70:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bc80:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bc90:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bca0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bcb0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003bcc0:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 0003bcd0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003bce0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003bcf0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003bd00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bd10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bd20:·3d22·2369·646d·3834·3331·2220·7461·6269··="#idm8431"·tabi | |||
| 0003bd30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bd40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bd50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bd60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bd70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bd80:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003bd90:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003bda0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bdb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bdc0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bdd0:·3d22·6964·6d38·3433·3122·3e3c·7461·626c··="idm8431"><tabl | |||
| 0003bde0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bdf0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| Max diff block lines reached; 7299459/7331805 bytes (99.56%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 61 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 62 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 63 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 65 | ····*·cpe:/o:centos:centos:9 | 65 | ····*·cpe:/o:centos:centos:9 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 74 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 75 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 125, 14 lines modified | Offset 125, 33 lines modified | ||
| 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 125 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 128 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 129 | ············_\x8c_\x8i_\x8s············6.1.1 | 129 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 131 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·--add=aide | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·install·aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 153 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 154 | ··package: |
| Offset 147, 38 lines modified | Offset 166, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 168 | ··-·low_complexity |
| 150 | ··-·low_disruption | 169 | ··-·low_disruption |
| 151 | ··-·medium_severity | 170 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_aide | ||
| 160 | class·install_aide·{ | ||
| 161 | ··package·{·'aide': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | 178 | #·Remediation·is·applicable·only·in·certain·platforms |
| 181 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 186, 21 lines modified | Offset 181, 26 lines modified | ||
| 186 | if·!·rpm·-q·--quiet·"aide"·;·then | 181 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 187 | ····dnf·install·-y·"aide" | 182 | ····dnf·install·-y·"aide" |
| 188 | fi | 183 | fi |
| 189 | else | 184 | else |
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 191 | fi | 186 | fi |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 197 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 1921, 14 lines modified | Offset 1921, 18 lines modified | ||
| 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1921 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1922 | ············_\x8i_\x8s_\x8m······1446 | 1922 | ············_\x8i_\x8s_\x8m······1446 |
| 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1923 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1924 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1925 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1926 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1927 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1928 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1929 | [customizations] | ||
| 1930 | fips·=·true | ||
| Max diff block lines reached; 564083/570031 bytes (98.96%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 000386f0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038700:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038710:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038720:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00038730:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038740:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038750:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038760:·2020·2020·2028·6173·206f·6620·3230·323 | 00038760:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038770:·2d30·3 | 00038770:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038780:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038790:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 000387a0:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 000387b0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 000387c0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000387d0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 000387e0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15246, 235 lines modified | Offset 15246, 235 lines modified | ||
| 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | 0003b8d0:·2d74·6172·6765·743d·2223·6964·6d38·3432··-target="#idm842 | ||
| 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 0003b8e0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b8f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b900:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b910:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b920:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b930:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b940:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b950:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b960:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b970:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b980:·7073·6522·2069·643d·2269·646d·3834·3238··pse"·id="idm8428 | |||
| 0003b990:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b9a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b9b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b9c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b9d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b9 | 0003b940:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b950:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b960:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b970:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b980:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b990:·643d·2269·646d·3834·3238·223e·3c70·7265··d="idm8428"><pre | |||
| 0003b9a0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b9b0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b9c0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b9d0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b9e0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b9f0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003ba00:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003ba10:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003ba20:·743d·2223·6964·6d38·3432·3922·2074·6162··t="#idm8429"·tab | |||
| 0003ba30:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003ba40:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ba50:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ba60:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ba70:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ba80:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003ba90:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003baa0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bab0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bac0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bad0:·6964·3d22·6964·6d38·3432·3922·3e3c·7461··id="idm8429"><ta | |||
| 0003bae0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003baf0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bb00:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bb10:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bb20:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003bb30:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003bb40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bb50:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b | 0003bb60:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003bb70:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003bb80:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bb90:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bba0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bbb0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bbc0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003bbd0:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003bbe0:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 0003bbf0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003bc00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003bc10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003bc20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003bc30:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003bc40:·3433·3022·2074·6162·696e·6465·783d·2230··430"·tabindex="0 | |||
| 0003bc50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bc60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bc70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bc80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bc90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bca0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003bcb0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bcc0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bcd0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bce0:·3d22·6964·6d38·3433·3022·3e3c·7461·626c··="idm8430"><tabl | |||
| 0003bcf0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bd00:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bd10:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bd20:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bd30:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003bd40:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003bd50:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bd60:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bd70:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bd80:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bd90:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003bda0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003ba30:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003ba40:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003ba50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003ba60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003ba70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003ba80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003ba90:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003baa0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bab0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bac0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bad0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bae0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003baf0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bb00:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bb10:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bb20:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bb30:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bb40:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bb50:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bb60:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003bb70:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bb80:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| Max diff block lines reached; 7212153/7244499 bytes (99.55%) of diff not shown. | |||
| Offset 67, 15 lines modified | Offset 67, 15 lines modified | ||
| 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 67 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 68 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 69 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 70 | ····*·cpe:/o:redhat:enterprise_linux:9 | 70 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 71 | ····*·cpe:/o:centos:centos:9 | 71 | ····*·cpe:/o:centos:centos:9 |
| 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 73 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 74 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 77 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 78 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 80 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 81 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 130, 14 lines modified | Offset 130, 33 lines modified | ||
| 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 130 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 133 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 134 | ············_\x8c_\x8i_\x8s············6.1.1 | 134 | ············_\x8c_\x8i_\x8s············6.1.1 |
| 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 135 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 136 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·--add=aide | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 142 | -·name:·Ensure·aide·is·installed | 158 | -·name:·Ensure·aide·is·installed |
| 143 | ··package: | 159 | ··package: |
| Offset 152, 38 lines modified | Offset 171, 14 lines modified | ||
| 152 | ··-·PCI-DSSv4-11.5.2 | 171 | ··-·PCI-DSSv4-11.5.2 |
| 153 | ··-·enable_strategy | 172 | ··-·enable_strategy |
| 154 | ··-·low_complexity | 173 | ··-·low_complexity |
| 155 | ··-·low_disruption | 174 | ··-·low_disruption |
| 156 | ··-·medium_severity | 175 | ··-·medium_severity |
| 157 | ··-·no_reboot_needed | 176 | ··-·no_reboot_needed |
| 158 | ··-·package_aide_installed | 177 | ··-·package_aide_installed |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | include·install_aide | ||
| 165 | class·install_aide·{ | ||
| 166 | ··package·{·'aide': | ||
| 167 | ····ensure·=>·'installed', | ||
| 168 | ··} | ||
| 169 | } | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 171 | [[packages]] | ||
| 172 | name·=·"aide" | ||
| 173 | version·=·"*" | ||
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | package·install·aide | ||
| 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | #·Remediation·is·applicable·only·in·certain·platforms | 183 | #·Remediation·is·applicable·only·in·certain·platforms |
| 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 184 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 191, 21 lines modified | Offset 186, 26 lines modified | ||
| 191 | if·!·rpm·-q·--quiet·"aide"·;·then | 186 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 192 | ····dnf·install·-y·"aide" | 187 | ····dnf·install·-y·"aide" |
| 193 | fi | 188 | fi |
| 194 | else | 189 | else |
| 195 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 196 | fi | 191 | fi |
| 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 197 | include·install_aide | ||
| 202 | 198 | class·install_aide·{ | |
| 199 | ··package·{·'aide': | ||
| 200 | ····ensure·=>·'installed', | ||
| 201 | ··} | ||
| 202 | } | ||
| 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 203 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 204 | Run·the·following·command·to·generate·a·new·database: | 204 | Run·the·following·command·to·generate·a·new·database: |
| 205 | $·sudo·/usr/sbin/aide·--init | 205 | $·sudo·/usr/sbin/aide·--init |
| 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 206 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 207 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 208 | To·initiate·a·manual·check,·run·the·following·command: | 208 | To·initiate·a·manual·check,·run·the·following·command: |
| 209 | $·sudo·/usr/sbin/aide·--check | 209 | $·sudo·/usr/sbin/aide·--check |
| Offset 1926, 14 lines modified | Offset 1926, 18 lines modified | ||
| 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1926 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1927 | ············_\x8i_\x8s_\x8m······1446 | 1927 | ············_\x8i_\x8s_\x8m······1446 |
| 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1928 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1929 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1930 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1931 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 1932 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 1933 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1934 | [customizations] | ||
| 1935 | fips·=·true | ||
| Max diff block lines reached; 554721/560682 bytes (98.94%) of diff not shown. | |||
| Offset 14354, 15 lines modified | Offset 14354, 15 lines modified | ||
| 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038110:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038120:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038130:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038140:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038150:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038160:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038170:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038180:·7320·6f66·2032·3032·3 | 00038180:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038190:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000381e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000381f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15399, 239 lines modified | Offset 15399, 239 lines modified | ||
| 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c260:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | 0003c270:·743d·2223·6964·6d32·3533·3222·2074·6162··t="#idm2532"·tab | ||
| 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c280:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c290:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c2a0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c2b0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c2c0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c2d0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 0003c2e0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003c2f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003c300:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003c310:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003c320:·643d·2269·646d·3235·3332·223e·3c74·6162··d="idm2532"><tab | |||
| 0003c330:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003c340:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003c350:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003c360:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003c370:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003c2e0:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 0003c2f0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003c300:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003c310:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003c320:·2220·6964·3d22·6964·6d32·3533·3222·3e3c··"·id="idm2532">< | |||
| 0003c330:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003c340:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c350:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c360:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c370:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003c380:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003c390:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003c3a0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c3 | 0003c380:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003c3c0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003c3 | 0003c390:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 0003c3a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003c3b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003c3c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003c3d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003c3e0:· | 0003c3e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003c3f0:· | 0003c3f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003c400:· | 0003c400:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003c410:· | 0003c410:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003c420:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 0003c430:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 0003c440:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 0003c450:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 0003c460:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 0003c470:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 0003c480:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 0003c490:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 0003c4a0:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 0003c4b0:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 0003c4c0:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 0003c4d0:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 0003c4e0:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 0003c4f0:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 0003c500:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 0003c510:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 0003c520:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 0003c530:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 0003c540:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 0003c550:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 0003c560:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 0003c570:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 0003c580:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 0003c590:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 0003c5a0:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 0003c5b0:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 0003c5c0:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 0003c5d0:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 0003c5e0:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 0003c5f0:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 0003c600:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 0003c610:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 0003c620:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 0003c630:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c640:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c650:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c660:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c670:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c680:·2223·6964·6d32·3533·3322·2074·6162·696e··"#idm2533"·tabin | |||
| 0003c690:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c6a0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c6b0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c6c0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c6d0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c6e0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003c6f0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003c700:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003c710:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003c720:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003c730:·2269·646d·3235·3333·223e·3c74·6162·6c65··"idm2533"><table | |||
| 0003c740:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003c750:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003c760:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003c770:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003c780:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003c790:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003c7a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003c7b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003c7c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003c7d0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003c7e0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003c7f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003c800:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 0003c810:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 0003c820:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003c | 0003c420:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003c | 0003c430:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003c | 0003c440:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003c | 0003c450:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| Max diff block lines reached; 5521783/5554543 bytes (99.41%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 133, 39 lines modified | Offset 133, 14 lines modified | ||
| 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 133 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 134 | ············_\x8i_\x8s_\x8m······1446 | 134 | ············_\x8i_\x8s_\x8m······1446 |
| 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 135 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 136 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 137 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 138 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 139 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 145 | --- | ||
| 146 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 147 | kind:·MachineConfig | ||
| 148 | spec: | ||
| 149 | ··config: | ||
| 150 | ····ignition: | ||
| 151 | ······version:·3.1.0 | ||
| 152 | ····systemd: | ||
| 153 | ······units: | ||
| 154 | ········-·name:·configure-crypto-policy.service | ||
| 155 | ··········enabled:·true | ||
| 156 | ··········contents:·| | ||
| 157 | ············[Unit] | ||
| 158 | ············Before=kubelet.service | ||
| 159 | ············[Service] | ||
| 160 | ············Type=oneshot | ||
| 161 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 162 | ············RemainAfterExit=yes | ||
| 163 | ············[Install] | ||
| 164 | ············WantedBy=multi-user.target | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 170 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 145 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 171 | ··set_fact: | 146 | ··set_fact: |
| Offset 227, 14 lines modified | Offset 202, 39 lines modified | ||
| 227 | » echo·"to·see·what·package·to·(re)install"·>&2 | 202 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 228 | » false··#·end·with·an·error·code | 203 | » false··#·end·with·an·error·code |
| 229 | elif·test·"$rc"·!=·0;·then | 204 | elif·test·"$rc"·!=·0;·then |
| 230 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 205 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 231 | » false··#·end·with·an·error·code | 206 | » false··#·end·with·an·error·code |
| 232 | fi | 207 | fi |
| 208 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 209 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 210 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 211 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 212 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 213 | --- | ||
| 214 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 215 | kind:·MachineConfig | ||
| 216 | spec: | ||
| 217 | ··config: | ||
| 218 | ····ignition: | ||
| 219 | ······version:·3.1.0 | ||
| 220 | ····systemd: | ||
| 221 | ······units: | ||
| 222 | ········-·name:·configure-crypto-policy.service | ||
| 223 | ··········enabled:·true | ||
| 224 | ··········contents:·| | ||
| 225 | ············[Unit] | ||
| 226 | ············Before=kubelet.service | ||
| 227 | ············[Service] | ||
| 228 | ············Type=oneshot | ||
| 229 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 230 | ············RemainAfterExit=yes | ||
| 231 | ············[Install] | ||
| 232 | ············WantedBy=multi-user.target | ||
| 233 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 233 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·G\x8Gn\x8nu\x8uT\x8TL\x8LS\x8S·l\x8li\x8ib\x8br\x8ra\x8ar\x8ry\x8y·t\x8to\x8o·u\x8us\x8se\x8e·D\x8Do\x8oD\x8D-\x8-a\x8ap\x8pp\x8pr\x8ro\x8ov\x8ve\x8ed\x8d·T\x8TL\x8LS\x8S·E\x8En\x8nc\x8cr\x8ry\x8yp\x8pt\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 234 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 | 234 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·GnuTLS·is·supported·by·system·crypto·policy,·but·the·GnuTLS·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·/etc/crypto-policies/back-ends/gnutls.config·contains·the·following·line·and·is·not·commented·out:·+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1:-VERS-DTLS1.0 |
| 235 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. | 235 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·the·GnuTLS·library·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 236 | Severity: ··medium | 236 | Severity: ··medium |
| 237 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy | 237 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_gnutls_tls_crypto_policy |
| 238 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 | 238 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001453 |
| 239 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) | 239 | References:·_\x8n_\x8i_\x8s_\x8t···AC-17(2) |
| Offset 774, 14 lines modified | Offset 774, 33 lines modified | ||
| 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 774 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 775 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 776 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 777 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 778 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 779 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 780 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 782 | [[packages]] | ||
| 783 | name·=·"sudo" | ||
| 784 | version·=·"*" | ||
| 785 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 786 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 787 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 788 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 789 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 790 | package·--add=sudo | ||
| 791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 792 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 793 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 794 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 795 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 796 | package·install·sudo | ||
| 781 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 797 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 782 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 798 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 783 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 799 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 784 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 800 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 785 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 801 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 360410/366528 bytes (98.33%) of diff not shown. | |||
| Offset 14376, 16 lines modified | Offset 14376, 16 lines modified | ||
| 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038270:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038280:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038290:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 000382a0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 000382b0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 000382c0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000382d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000382e0:·2020·2020·2028·6173·206f·6620·3230·323 | 000382e0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 000382f0:·2d30·3 | 000382f0:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038300:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038310:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038320:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038330:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038340:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038350:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00038360:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15900, 256 lines modified | Offset 15900, 256 lines modified | ||
| 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003e1b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | 0003e1c0:·646d·3233·3733·2220·7461·6269·6e64·6578··dm2373"·tabindex | ||
| 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003e1d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003e1e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003e1f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003e200:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003e210:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003e220:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 0003e230:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 0003e240:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003e250:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003e260:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003e270:·7365·2220·6964·3d22·6964·6d32·3337·3322··se"·id="idm2373" | |||
| 0003e280:·3e3c·7072·653e·3c63·6f64·653e·0a5b·6375··><pre><code>.[cu | |||
| 0003e290:·7374·6f6d·697a·6174·696f·6e73·5d0a·6669··stomizations].fi | |||
| 0003e2a0:·7073·203d·2074·7275·650a·3c2f·636f·6465··ps·=·true.</code | |||
| 0003e2b0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003e2c0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003e2d0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003e2e0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003e2f0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003e300:·3233·3734·2220·7461·6269·6e64·6578·3d22··2374"·tabindex=" | |||
| 0003e310:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003e320:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003e330:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003e340:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003e350:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003e | 0003e360:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | ||
| 0003e | 0003e370:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | ||
| 0003e | 0003e380:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | ||
| 0003e | 0003e390:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | ||
| 0003e | 0003e3a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | ||
| 0003e | 0003e3b0:·3337·3422·3e3c·7461·626c·6520·636c·6173··374"><table·clas | ||
| 0003e | 0003e3c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | ||
| 0003e | 0003e3d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | ||
| 0003e | 0003e3e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | ||
| 0003e | 0003e3f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | ||
| 0003e | 0003e400:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | ||
| 0003e | 0003e410:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 0003e | 0003e420:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003e | 0003e430:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | ||
| 0003e | 0003e440:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003e | 0003e450:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003e | 0003e460:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0003e | 0003e470:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003e | 0003e480:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003e | 0003e490:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003e | 0003e4a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003e | 0003e4b0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | ||
| 0003e | 0003e4c0:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003e | 0003e4d0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| 0003e | 0003e4e0:·2023·2070·726f·6d6f·7465·2074·6f20·7661···#·promote·to·va | ||
| 0003e | 0003e4f0:·7269·6162·6c65·0a20·2073·6574·5f66·6163··riable.··set_fac | ||
| 0003e | 0003e500:·743a·0a20·2020·2076·6172·5f73·7973·7465··t:.····var_syste | ||
| 0003e | 0003e510:·6d5f·6372·7970·746f·5f70·6f6c·6963·793a··m_crypto_policy: | ||
| 0003e | 0003e520:·2021·2173·7472·203c·6162·6272·2074·6974···!!str·<abbr·tit | ||
| 0003e | 0003e530:·6c65·3d22·6672·6f6d·2050·726f·6669·6c65··le="from·Profile | ||
| 0003e | 0003e540:·2f72·6566·696e·652d·7661·6c75·653a·2078··/refine-value:·x | ||
| 0003e | 0003e550:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 0003e | 0003e560:·6563·742e·636f·6e74·656e·745f·7661·6c75··ect.content_valu | ||
| 0003e | 0003e570:·655f·7661·725f·7379·7374·656d·5f63·7279··e_var_system_cry | ||
| 0003e | 0003e580:·7074·6f5f·706f·6c69·6379·223e·4649·5053··pto_policy">FIPS | ||
| 0003e | 0003e590:·3c2f·6162·6272·3e0a·2020·7461·6773·3a0a··</abbr>.··tags:. | ||
| 0003e | 0003e5a0:·2020·2020·2d20·616c·7761·7973·0a0a·2d20······-·always..-· | ||
| 0003e5b0:·6e61·6d65·3a20·456e·6162·6c65·2046·4950··name:·Enable·FIP | |||
| 0003e5c0:·5320·4d6f·6465·202d·2043·6865·636b·2074··S·Mode·-·Check·t | |||
| 0003e5d0:·6f20·5365·6520·7468·6520·4375·7272·656e··o·See·the·Curren | |||
| 0003e5e0:·7420·5374·6174·7573·206f·6620·4649·5053··t·Status·of·FIPS | |||
| 0003e5f0:·204d·6f64·650a·2020·616e·7369·626c·652e···Mode.··ansible. | |||
| 0003e600:·6275·696c·7469·6e2e·636f·6d6d·616e·643a··builtin.command: | |||
| 0003e610:·202f·7573·722f·6269·6e2f·6669·7073·2d6d···/usr/bin/fips-m | |||
| 0003e620:·6f64·652d·7365·7475·7020·2d2d·6368·6563··ode-setup·--chec | |||
| 0003e630:·6b0a·2020·7265·6769·7374·6572·3a20·6973··k.··register:·is | |||
| 0003e640:·5f66·6970·735f·656e·6162·6c65·640a·2020··_fips_enabled.·· | |||
| 0003e650:·6661·696c·6564·5f77·6865·6e3a·2066·616c··failed_when:·fal | |||
| 0003e660:·7365·0a20·2063·6861·6e67·6564·5f77·6865··se.··changed_whe | |||
| 0003e670:·6e3a·2066·616c·7365·0a20·2077·6865·6e3a··n:·false.··when: | |||
| 0003e680:·0a20·202d·2028·2061·6e73·6962·6c65·5f76··.··-·(·ansible_v | |||
| 0003e690:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003e6a0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003e6b0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003e6c0:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003e6d0:·2263·6f6e·7461·696e·6572·225d·0a20·2020··"container"].··· | |||
| 0003e6e0:·2061·6e64·206e·6f74·2028·206c·6f6f·6b75···and·not·(·looku | |||
| 0003e6f0:·7028·2265·6e76·222c·2022·636f·6e74·6169··p("env",·"contai | |||
| 0003e700:·6e65·7222·2920·3d3d·2022·6277·7261·702d··ner")·==·"bwrap- | |||
| 0003e710:·6f73·6275·696c·6422·2029·2029·0a20·202d··osbuild"·)·).··- | |||
| 0003e720:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003e730:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003e740:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003e750:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003e760:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003e770:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003e780:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003e790:·4d2d·3328·3629·0a20·202d·204e·4953·542d··M-3(6).··-·NIST- | |||
| 0003e7a0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003e7b0:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | |||
| 0003e7c0:·412d·370a·2020·2d20·4e49·5354·2d38·3030··A-7.··-·NIST-800 | |||
| 0003e7d0:·2d35·332d·5343·2d31·320a·2020·2d20·4e49··-53-SC-12.··-·NI | |||
| 0003e7e0:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003e7f0:·3229·0a20·202d·204e·4953·542d·3830·302d··2).··-·NIST-800- | |||
| 0003e800:·3533·2d53·432d·3132·2833·290a·2020·2d20··53-SC-12(3).··-· | |||
| 0003e810:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | |||
| 0003e820:·330a·2020·2d20·656e·6162·6c65·5f66·6970··3.··-·enable_fip | |||
| 0003e830:·735f·6d6f·6465·0a20·202d·2068·6967·685f··s_mode.··-·high_ | |||
| 0003e840:·7365·7665·7269·7479·0a20·202d·206d·6564··severity.··-·med | |||
| 0003e850:·6975·6d5f·636f·6d70·6c65·7869·7479·0a20··ium_complexity.· | |||
| 0003e860:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | |||
| 0003e870:·7469·6f6e·0a20·202d·2072·6562·6f6f·745f··tion.··-·reboot_ | |||
| 0003e880:·7265·7175·6972·6564·0a20·202d·2072·6573··required.··-·res | |||
| Max diff block lines reached; 2697275/2732519 bytes (98.71%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | ····*·cpe:/o:fedoraproject:fedora:41 | 49 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 50 | ····*·cpe:/o:fedoraproject:fedora:42 | 50 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 51 | ····*·cpe:/o:fedoraproject:fedora:43 | 51 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 52 | ····*·cpe:/o:fedoraproject:fedora:44 | 52 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 53 | ····*·cpe:/o:fedoraproject:fedora:45 | 53 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 286, 14 lines modified | Offset 286, 18 lines modified | ||
| 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 286 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 287 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 294 | [customizations] | ||
| 295 | fips·=·true | ||
| 293 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 296 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 294 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 297 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 295 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 298 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 296 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 299 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 297 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 300 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 298 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 301 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 299 | ··set_fact: | 302 | ··set_fact: |
| Offset 389, 18 lines modified | Offset 393, 14 lines modified | ||
| 389 | ··-·NIST-800-53-SC-13 | 393 | ··-·NIST-800-53-SC-13 |
| 390 | ··-·enable_fips_mode | 394 | ··-·enable_fips_mode |
| 391 | ··-·high_severity | 395 | ··-·high_severity |
| 392 | ··-·medium_complexity | 396 | ··-·medium_complexity |
| 393 | ··-·medium_disruption | 397 | ··-·medium_disruption |
| 394 | ··-·reboot_required | 398 | ··-·reboot_required |
| 395 | ··-·restrict_strategy | 399 | ··-·restrict_strategy |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 397 | [customizations] | ||
| 398 | fips·=·true | ||
| 399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 400 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 400 | #·Remediation·is·applicable·only·in·certain·platforms | 401 | #·Remediation·is·applicable·only·in·certain·platforms |
| 401 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 402 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 402 | var_system_crypto_policy='FIPS' | 403 | var_system_crypto_policy='FIPS' |
| Offset 474, 39 lines modified | Offset 474, 14 lines modified | ||
| 474 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 474 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 475 | ············_\x8i_\x8s_\x8m······1446 | 475 | ············_\x8i_\x8s_\x8m······1446 |
| 476 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 476 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 477 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 477 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 478 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 479 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 479 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 480 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 486 | --- | ||
| 487 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 488 | kind:·MachineConfig | ||
| 489 | spec: | ||
| 490 | ··config: | ||
| 491 | ····ignition: | ||
| 492 | ······version:·3.1.0 | ||
| 493 | ····systemd: | ||
| 494 | ······units: | ||
| 495 | ········-·name:·configure-crypto-policy.service | ||
| 496 | ··········enabled:·true | ||
| 497 | ··········contents:·| | ||
| 498 | ············[Unit] | ||
| 499 | ············Before=kubelet.service | ||
| 500 | ············[Service] | ||
| 501 | ············Type=oneshot | ||
| 502 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 503 | ············RemainAfterExit=yes | ||
| 504 | ············[Install] | ||
| 505 | ············WantedBy=multi-user.target | ||
| 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 511 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 486 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 512 | ··set_fact: | 487 | ··set_fact: |
| Offset 568, 14 lines modified | Offset 543, 39 lines modified | ||
| 568 | » echo·"to·see·what·package·to·(re)install"·>&2 | 543 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 569 | » false··#·end·with·an·error·code | 544 | » false··#·end·with·an·error·code |
| 570 | elif·test·"$rc"·!=·0;·then | 545 | elif·test·"$rc"·!=·0;·then |
| 571 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 546 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 572 | » false··#·end·with·an·error·code | 547 | » false··#·end·with·an·error·code |
| 573 | fi | 548 | fi |
| 549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 554 | --- | ||
| 555 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 556 | kind:·MachineConfig | ||
| 557 | spec: | ||
| 558 | ··config: | ||
| 559 | ····ignition: | ||
| 560 | ······version:·3.1.0 | ||
| 561 | ····systemd: | ||
| 562 | ······units: | ||
| 563 | ········-·name:·configure-crypto-policy.service | ||
| 564 | ··········enabled:·true | ||
| 565 | ··········contents:·| | ||
| 566 | ············[Unit] | ||
| 567 | ············Before=kubelet.service | ||
| 568 | ············[Service] | ||
| 569 | ············Type=oneshot | ||
| 570 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 571 | ············RemainAfterExit=yes | ||
| 572 | ············[Install] | ||
| 573 | ············WantedBy=multi-user.target | ||
| 574 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 574 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 204604/210808 bytes (97.06%) of diff not shown. | |||
| Offset 14349, 15 lines modified | Offset 14349, 15 lines modified | ||
| 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 000380c0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000380d0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000380e0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000380f0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038100:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00038110:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00038120:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038130:·6173·206f·6620·3230·323 | 00038130:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038140:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038150:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038160:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038170:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038180:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038190:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000381a0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 16441, 234 lines modified | Offset 16441, 234 lines modified | ||
| 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 00040380:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | 00040390:·3230·3832·2220·7461·6269·6e64·6578·3d22··2082"·tabindex=" | ||
| 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000403a0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000403b0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 000403c0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 000403d0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 000403e0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 000403f0:·6469·6174·696f·6e20·4 | 000403f0:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00040400:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00040400:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040410:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040420:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040430:·6c6c·6170·7365·2220·6964·3d22·6964·6d32··llapse"·id="idm2 | |||
| 00040440:·3038·3222·3e3c·7461·626c·6520·636c·6173··082"><table·clas | |||
| 00040450:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040460:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040470:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040480:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00040490:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 000404a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000404b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 000404c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 000404d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000404e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000404f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00040500:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00040510:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00040520:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00040530:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 00040540:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 00040550:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 00040560:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 00040570:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 00040580:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 00040590:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 000405a0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 000405b0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 000405c0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 000405d0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 000405e0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 000405f0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 00040600:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | |||
| 00040610:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00040620:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00040630:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00040640:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00040650:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00040660:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00040670:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00040680:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 00040690:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 000406a0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 000406b0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 000406c0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 000406d0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 000406e0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 000406f0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040700:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040710:·6765·743d·2223·6964·6d32·3038·3322·2074··get="#idm2083"·t | |||
| 00040720:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040730:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040740:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040750:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040760:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040770:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040780:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 00040 | 00040410:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00040 | 00040420:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00040 | 00040430:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 00040 | 00040440:·2220·6964·3d22·6964·6d32·3038·3222·3e3c··"·id="idm2082">< | ||
| 000407d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000407e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000407f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040800:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040810:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040820:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00040830:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040840:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00040850:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040860:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00040870:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00040880:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040890:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000408a0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 000408b0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000408c0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 000408d0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 000408e0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 000408f0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 00040900:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 00040910:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 00040920:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 00040930:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040940:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040950:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040960:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040970:·612d·7461·7267·6574·3d22·2369·646d·3230··a-target="#idm20 | |||
| 00040980:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | |||
| 00040990:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000409a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000409b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000409c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000409d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000409e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 000409f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 00040a00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040a10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040a20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040a30:·6964·3d22·6964·6d32·3038·3422·3e3c·7072··id="idm2084"><pr | |||
| 00040 | 00040450:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | ||
| 00040 | 00040460:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | ||
| Max diff block lines reached; 2897898/2929968 bytes (98.91%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ····*·cpe:/o:fedoraproject:fedora:41 | 42 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 43 | ····*·cpe:/o:fedoraproject:fedora:42 | 43 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:43 | 44 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:44 | 45 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:45 | 46 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 412, 14 lines modified | Offset 412, 33 lines modified | ||
| 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 412 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 413 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 414 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 416 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 417 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 418 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 420 | [[packages]] | ||
| 421 | name·=·"aide" | ||
| 422 | version·=·"*" | ||
| 423 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 424 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 425 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 426 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 427 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 428 | package·--add=aide | ||
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 430 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 431 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 432 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 433 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 434 | package·install·aide | ||
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 435 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 436 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 437 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 438 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 439 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 424 | -·name:·Ensure·aide·is·installed | 440 | -·name:·Ensure·aide·is·installed |
| 425 | ··package: | 441 | ··package: |
| Offset 433, 38 lines modified | Offset 452, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 452 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·enable_strategy | 453 | ··-·enable_strategy |
| 435 | ··-·low_complexity | 454 | ··-·low_complexity |
| 436 | ··-·low_disruption | 455 | ··-·low_disruption |
| 437 | ··-·medium_severity | 456 | ··-·medium_severity |
| 438 | ··-·no_reboot_needed | 457 | ··-·no_reboot_needed |
| 439 | ··-·package_aide_installed | 458 | ··-·package_aide_installed |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | include·install_aide | ||
| 446 | class·install_aide·{ | ||
| 447 | ··package·{·'aide': | ||
| 448 | ····ensure·=>·'installed', | ||
| 449 | ··} | ||
| 450 | } | ||
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | [[packages]] | ||
| 453 | name·=·"aide" | ||
| 454 | version·=·"*" | ||
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 460 | package·install·aide | ||
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 462 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 463 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 464 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 465 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 466 | #·Remediation·is·applicable·only·in·certain·platforms | 464 | #·Remediation·is·applicable·only·in·certain·platforms |
| 467 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 465 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 472, 21 lines modified | Offset 467, 26 lines modified | ||
| 472 | if·!·rpm·-q·--quiet·"aide"·;·then | 467 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 473 | ····dnf·install·-y·"aide" | 468 | ····dnf·install·-y·"aide" |
| 474 | fi | 469 | fi |
| 475 | else | 470 | else |
| 476 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 471 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 477 | fi | 472 | fi |
| 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 478 | include·install_aide | ||
| 483 | 479 | class·install_aide·{ | |
| 480 | ··package·{·'aide': | ||
| 481 | ····ensure·=>·'installed', | ||
| 482 | ··} | ||
| 483 | } | ||
| 484 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 484 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 485 | Run·the·following·command·to·generate·a·new·database: | 485 | Run·the·following·command·to·generate·a·new·database: |
| 486 | $·sudo·/usr/sbin/aide·--init | 486 | $·sudo·/usr/sbin/aide·--init |
| 487 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 487 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 488 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 488 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 489 | To·initiate·a·manual·check,·run·the·following·command: | 489 | To·initiate·a·manual·check,·run·the·following·command: |
| 490 | $·sudo·/usr/sbin/aide·--check | 490 | $·sudo·/usr/sbin/aide·--check |
| Offset 798, 39 lines modified | Offset 798, 14 lines modified | ||
| 798 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 798 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 799 | ············_\x8i_\x8s_\x8m······1446 | 799 | ············_\x8i_\x8s_\x8m······1446 |
| 800 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 800 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 801 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 801 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 802 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 802 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 803 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 803 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 804 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 804 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 805 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 806 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 807 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 808 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 142223/148908 bytes (95.51%) of diff not shown. | |||
| Offset 14354, 16 lines modified | Offset 14354, 16 lines modified | ||
| 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038110:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038120:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038130:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038140:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038150:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00038160:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038170:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038180:·2028·6173·206f·6620·3230·323 | 00038180:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00038190:·323 | 00038190:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000381a0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000381b0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000381c0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000381d0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000381e0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000381f0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038200:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17318, 237 lines modified | Offset 17318, 237 lines modified | ||
| 00043a50:·6574·3d22·2369·646d·3235·3332·2220·7461··et="#idm2532"·ta | 00043a50:·6574·3d22·2369·646d·3235·3332·2220·7461··et="#idm2532"·ta | ||
| 00043a60:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00043a60:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00043a70:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00043a70:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00043a80:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00043a80:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00043a90:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00043a90:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00043aa0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00043aa0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00043ab0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00043ab0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00043ac0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00043ad0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00043ae0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00043af0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00043b00:·6964·3d22·6964·6d32·3533·3222·3e3c·7461··id="idm2532"><ta | |||
| 00043b10:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00043b20:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00043b30:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00043b40:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00043b50:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00043ac0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 00043ad0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00043ae0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00043af0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00043b00:·6522·2069·643d·2269·646d·3235·3332·223e··e"·id="idm2532"> | |||
| 00043b10:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 00043b20:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 00043b30:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 00043b40:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 00043b50:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 00043b60:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 00043b70:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00043b80:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 00043b | 00043b60:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | ||
| 00043b | 00043b70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00043b | 00043b80:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | ||
| 00043b90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00043ba0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00043bb0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00043bc0:· | 00043bc0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00043bd0:· | 00043bd0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 00043be0:· | 00043be0:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 00043bf0:· | 00043bf0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 00043c00:·7265·3e3c·636f·6465·3e2d·2d2d·0a61·7069··re><code>---.api | |||
| 00043c10:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | |||
| 00043c20:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | |||
| 00043c30:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | |||
| 00043c40:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | |||
| 00043c50:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | |||
| 00043c60:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | |||
| 00043c70:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | |||
| 00043c80:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | |||
| 00043c90:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | |||
| 00043ca0:·2020·2020·2020·202d·206e·616d·653a·2063·········-·name:·c | |||
| 00043cb0:·6f6e·6669·6775·7265·2d63·7279·7074·6f2d··onfigure-crypto- | |||
| 00043cc0:·706f·6c69·6379·2e73·6572·7669·6365·0a20··policy.service.· | |||
| 00043cd0:·2020·2020·2020·2020·2065·6e61·626c·6564···········enabled | |||
| 00043ce0:·3a20·7472·7565·0a20·2020·2020·2020·2020··:·true.········· | |||
| 00043cf0:·2063·6f6e·7465·6e74·733a·207c·0a20·2020···contents:·|.··· | |||
| 00043d00:·2020·2020·2020·2020·205b·556e·6974·5d0a···········[Unit]. | |||
| 00043d10:·2020·2020·2020·2020·2020·2020·4265·666f··············Befo | |||
| 00043d20:·7265·3d6b·7562·656c·6574·2e73·6572·7669··re=kubelet.servi | |||
| 00043d30:·6365·0a20·2020·2020·2020·2020·2020·205b··ce.············[ | |||
| 00043d40:·5365·7276·6963·655d·0a20·2020·2020·2020··Service].······· | |||
| 00043d50:·2020·2020·2054·7970·653d·6f6e·6573·686f·······Type=onesho | |||
| 00043d60:·740a·2020·2020·2020·2020·2020·2020·4578··t.············Ex | |||
| 00043d70:·6563·5374·6172·743d·7570·6461·7465·2d63··ecStart=update-c | |||
| 00043d80:·7279·7074·6f2d·706f·6c69·6369·6573·202d··rypto-policies·- | |||
| 00043d90:·2d73·6574·207b·7b2e·7661·725f·7379·7374··-set·{{.var_syst | |||
| 00043da0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | |||
| 00043db0:·7d7d·0a20·2020·2020·2020·2020·2020·2052··}}.············R | |||
| 00043dc0:·656d·6169·6e41·6674·6572·4578·6974·3d79··emainAfterExit=y | |||
| 00043dd0:·6573·0a20·2020·2020·2020·2020·2020·205b··es.············[ | |||
| 00043de0:·496e·7374·616c·6c5d·0a20·2020·2020·2020··Install].······· | |||
| 00043df0:·2020·2020·2057·616e·7465·6442·793d·6d75·······WantedBy=mu | |||
| 00043e00:·6c74·692d·7573·6572·2e74·6172·6765·740a··lti-user.target. | |||
| 00043e10:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00043e20:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00043e30:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00043e40:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00043e50:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00043e60:·3d22·2369·646d·3235·3333·2220·7461·6269··="#idm2533"·tabi | |||
| 00043e70:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00043e80:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00043e90:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00043ea0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00043eb0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00043ec0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 00043ed0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00043ee0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00043ef0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00043f00:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00043f10:·3d22·6964·6d32·3533·3322·3e3c·7461·626c··="idm2533"><tabl | |||
| 00043f20:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00043f30:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00043f40:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00043f50:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00043f60:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00043f70:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00043f80:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00043f90:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00043fa0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00043fb0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00043fc0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00043fd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00043fe0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00043ff0:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | |||
| 00044000:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0004 | 00043c00:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | ||
| 0004 | 00043c10:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | ||
| 0004 | 00043c20:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 0004 | 00043c30:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 000440 | 00043c40:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| Max diff block lines reached; 2278124/2310746 bytes (98.59%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | ····*·cpe:/o:fedoraproject:fedora:41 | 43 | ····*·cpe:/o:fedoraproject:fedora:41 |
| 44 | ····*·cpe:/o:fedoraproject:fedora:42 | 44 | ····*·cpe:/o:fedoraproject:fedora:42 |
| 45 | ····*·cpe:/o:fedoraproject:fedora:43 | 45 | ····*·cpe:/o:fedoraproject:fedora:43 |
| 46 | ····*·cpe:/o:fedoraproject:fedora:44 | 46 | ····*·cpe:/o:fedoraproject:fedora:44 |
| 47 | ····*·cpe:/o:fedoraproject:fedora:45 | 47 | ····*·cpe:/o:fedoraproject:fedora:45 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········3.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 559, 39 lines modified | Offset 559, 14 lines modified | ||
| 559 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) | 559 | ············_\x8h_\x8i_\x8p_\x8a_\x8a····164.308(a)(4)(i),·164.308(b)(1),·164.308(b)(3),·164.312(e)(1),·164.312(e)(2)(ii) |
| 560 | ············_\x8i_\x8s_\x8m······1446 | 560 | ············_\x8i_\x8s_\x8m······1446 |
| 561 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 561 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 562 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 562 | References:·_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 563 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 563 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 564 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 564 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 565 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 565 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 567 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 568 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 569 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 570 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 571 | --- | ||
| 572 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 573 | kind:·MachineConfig | ||
| 574 | spec: | ||
| 575 | ··config: | ||
| 576 | ····ignition: | ||
| 577 | ······version:·3.1.0 | ||
| 578 | ····systemd: | ||
| 579 | ······units: | ||
| 580 | ········-·name:·configure-crypto-policy.service | ||
| 581 | ··········enabled:·true | ||
| 582 | ··········contents:·| | ||
| 583 | ············[Unit] | ||
| 584 | ············Before=kubelet.service | ||
| 585 | ············[Service] | ||
| 586 | ············Type=oneshot | ||
| 587 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 588 | ············RemainAfterExit=yes | ||
| 589 | ············[Install] | ||
| 590 | ············WantedBy=multi-user.target | ||
| 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 567 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 568 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 569 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 570 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 596 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 571 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 597 | ··set_fact: | 572 | ··set_fact: |
| Offset 653, 14 lines modified | Offset 628, 39 lines modified | ||
| 653 | » echo·"to·see·what·package·to·(re)install"·>&2 | 628 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 654 | » false··#·end·with·an·error·code | 629 | » false··#·end·with·an·error·code |
| 655 | elif·test·"$rc"·!=·0;·then | 630 | elif·test·"$rc"·!=·0;·then |
| 656 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 631 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 657 | » false··#·end·with·an·error·code | 632 | » false··#·end·with·an·error·code |
| 658 | fi | 633 | fi |
| 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 639 | --- | ||
| 640 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 641 | kind:·MachineConfig | ||
| 642 | spec: | ||
| 643 | ··config: | ||
| 644 | ····ignition: | ||
| 645 | ······version:·3.1.0 | ||
| 646 | ····systemd: | ||
| 647 | ······units: | ||
| 648 | ········-·name:·configure-crypto-policy.service | ||
| 649 | ··········enabled:·true | ||
| 650 | ··········contents:·| | ||
| 651 | ············[Unit] | ||
| 652 | ············Before=kubelet.service | ||
| 653 | ············[Service] | ||
| 654 | ············Type=oneshot | ||
| 655 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 656 | ············RemainAfterExit=yes | ||
| 657 | ············[Install] | ||
| 658 | ············WantedBy=multi-user.target | ||
| 659 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 659 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·K\x8Ke\x8er\x8rb\x8be\x8er\x8ro\x8os\x8s·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 660 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. | 660 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·Kerberos·is·supported·by·crypto·policy,·but·it's·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·for·Kerberos·are·configured·correctly,·examine·that·there·is·a·symlink·at·/etc/krb5.conf.d/crypto-policies·targeting·/etc/cypto-policies/back-ends/krb5.config.·If·the·symlink·exists,·Kerberos·is·configured·to·use·the·system-wide·crypto·policy·settings. |
| 661 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. | 661 | Rationale:··Overriding·the·system·crypto·policy·makes·the·behavior·of·Kerberos·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 662 | Severity: ··high | 662 | Severity: ··high |
| 663 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy | 663 | Rule·ID:····xccdf_org.ssgproject.content_rule_configure_kerberos_crypto_policy |
| 664 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 | 664 | ············_\x8i_\x8s_\x8m······0418,·1055,·1402 |
| 665 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 665 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| Offset 2185, 38 lines modified | Offset 2185, 14 lines modified | ||
| 2185 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 | 2185 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 |
| 2186 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) | 2186 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) |
| 2187 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 2187 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 2188 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 2188 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 2189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 2189 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 2190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 2190 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 2191 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 2191 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 2192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2193 | --- | ||
| 2194 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2195 | kind:·MachineConfig | ||
| 2196 | spec: | ||
| 2197 | ··config: | ||
| 2198 | ····ignition: | ||
| 2199 | ······version:·3.1.0 | ||
| 2200 | ····storage: | ||
| 2201 | ······files: | ||
| 2202 | ······-·contents: | ||
| 2203 | ··········source: | ||
| 2204 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2205 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2206 | ········mode:·0644 | ||
| 2207 | ········path:·/etc/pam.d/password-auth | ||
| 2208 | ········overwrite:·true | ||
| 2209 | ······-·contents: | ||
| 2210 | ··········source: | ||
| 2211 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 2212 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 2213 | ········mode:·0644 | ||
| 2214 | ········path:·/etc/pam.d/system-auth | ||
| 2215 | ········overwrite:·true | ||
| Max diff block lines reached; 91744/105998 bytes (86.55%) of diff not shown. | |||
| Offset 14332, 16 lines modified | Offset 14332, 16 lines modified | ||
| 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037fb0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037fc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037fd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037fe0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ff0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00038000:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038010:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038020:·2020·2020·2028·6173·206f·6620·3230·323 | 00038020:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00038030:·2d30·3 | 00038030:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00038040:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00038050:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00038060:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00038070:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00038080:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00038090:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" | 000380a0:·5f67·726f·7570·5f61·7564·6974·696e·6722··_group_auditing" |
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 | 53 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Apple·macOS·10.15 |
| 54 | ··············Catalina | 54 | ··············Catalina |
| 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 55 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 56 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 57 | ····*·cpe:/o:apple:macos:10.15 | 57 | ····*·cpe:/o:apple:macos:10.15 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8i_\x8n_\x8g_\x8·_\x8w_\x8i_\x8t_\x8h_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t |
| 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d | 63 | ·········1.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8a_\x8u_\x8d_\x8i_\x8t_\x8d |
| 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains | 65 | Group ·Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15· Group·contains |
| 66 | 2·groups·and·2·rules | 66 | 2·groups·and·2·rules |
| 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules | 67 | Group ·System·Accounting·with·audit· Group·contains·1·group·and·2·rules |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00039100:·323 | 00039100:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14602, 15 lines modified | Offset 14602, 15 lines modified | ||
| 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00039090:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 000390a0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 000390b0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 000390c0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 000390d0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 000390e0:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 000390f0:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039100:·3 | 00039100:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039110:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039120:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039130:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039140:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039150:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039160:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039170:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 16 lines modified | Offset 14601, 16 lines modified | ||
| 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039080:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039090:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000390a0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000390b0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000390c0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000390d0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000390e0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000390f0:·2028·6173·206f·6620·3230·323 | 000390f0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00039100:·323 | 00039100:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039110:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039120:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039130:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039140:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039150:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039160:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039170:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 75 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container | 76 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container |
| 77 | Platform·4· Group·contains·2·groups·and·1·rule | 77 | Platform·4· Group·contains·2·groups·and·1·rule |
| 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule | 78 | Group ·Kubernetes·Settings· Group·contains·1·group·and·1·rule |
| Offset 14601, 15 lines modified | Offset 14601, 15 lines modified | ||
| 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039080:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039090:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 000390a0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 000390b0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 000390c0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 000390d0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000390e0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000390f0:·6f66·2032·3032·3 | 000390f0:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039100:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00039110:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00039120:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00039130:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00039140:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00039150:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 00039160:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 78 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00039100:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00039110:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00039120:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00039130:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00039140:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039150:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039160:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039170:·6173·206f·6620·3230·323 | 00039170:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039180:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039190:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 000391a0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 000391b0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 000391c0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 000391d0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 000391e0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00039110:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00039120:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00039130:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00039140:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00039150:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00039160:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00039170:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00039180:·6f66·2032·3032·3 | 00039180:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00039190:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000391a0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000391b0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000391c0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 000391d0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 000391e0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op | 000391f0:·636f·6e74·656e·745f·6772·6f75·705f·6f70··content_group_op |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14610, 15 lines modified | Offset 14610, 15 lines modified | ||
| 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039110:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039120:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039130:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039140:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039150:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039160:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039170:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039180:·3032·3 | 00039180:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039190:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000391a0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000391b0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000391c0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000391d0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000391e0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000391f0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 76 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 78 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 14609, 15 lines modified | Offset 14609, 15 lines modified | ||
| 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039100:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039110:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039120:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039130:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039140:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039150:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039160:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039170:·6620·3230·323 | 00039170:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039180:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039190:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000391a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000391b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000391c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000391d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000391e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 64, 15 lines modified | Offset 64, 15 lines modified | ||
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 70 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 71 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 72 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 74 | ·········1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 75 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 76 | ·········3.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14603, 15 lines modified | Offset 14603, 15 lines modified | ||
| 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 000390a0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 000390b0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 000390c0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 000390d0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 000390e0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 000390f0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00039100:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00039110:·3230·323 | 00039110:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00039120:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00039130:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00039140:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00039150:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00039160:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00039170:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens | 00039180:·7465·6e74·5f67·726f·7570·5f6f·7065·6e73··tent_group_opens |
| Offset 63, 15 lines modified | Offset 63, 15 lines modified | ||
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 69 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 70 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········2.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 75 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 76 | ·········4.·_\x8R_\x8o_\x8l_\x8e_\x8-_\x8b_\x8a_\x8s_\x8e_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 77 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8R_\x8e_\x8g_\x8i_\x8s_\x8t_\x8r_\x8y_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 000393f0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00039400:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00039410:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039420:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039430:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039440:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039450:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039460:·2032·3032·3 | 00039460:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039470:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039480:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039490:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000394a0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000394b0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000394c0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000394d0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14655, 16 lines modified | Offset 14655, 16 lines modified | ||
| 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000393e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000393f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00039400:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00039410:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00039420:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00039430:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039440:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039450:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039450:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00039460:·303 | 00039460:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039470:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039480:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039490:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000394a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000394b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000394c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 000394d0:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000393f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00039400:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00039410:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039420:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039430:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039440:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039450:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039460:·206f·6620·3230·323 | 00039460:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039470:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039480:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039490:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000394a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000394b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000394c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000394d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14656, 15 lines modified | Offset 14656, 15 lines modified | ||
| 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 000393f0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00039400:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00039410:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00039420:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00039430:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00039440:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00039450:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00039460:·323 | 00039460:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00039470:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00039480:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00039490:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000394a0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000394b0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 000394c0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi | 000394d0:·6e74·5f67·726f·7570·5f6f·7065·6e73·6869··nt_group_openshi |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00039400:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00039410:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00039420:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00039430:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00039440:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00039450:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00039460:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00039470:·7320·6f66·2032·3032·3 | 00039470:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039480:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00039490:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000394a0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000394b0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000394c0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000394d0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000394e0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00039400:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00039410:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00039420:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039430:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039440:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039450:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039460:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039470:·3032·3 | 00039470:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039480:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039490:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000394a0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000394b0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000394c0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000394d0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000394e0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 88 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 89 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 90 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 16 lines modified | Offset 14657, 16 lines modified | ||
| 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039400:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00039410:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00039420:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00039430:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00039440:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00039450:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039460:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039470:·2028·6173·206f·6620·3230·323 | 00039470:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00039480:·323 | 00039480:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039490:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000394a0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 000394b0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 000394c0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 000394d0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 000394e0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 000394f0:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14657, 15 lines modified | Offset 14657, 15 lines modified | ||
| 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00039400:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00039410:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00039420:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00039430:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00039440:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039450:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039460:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039470:·6620·3230·323 | 00039470:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039480:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039490:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000394a0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000394b0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 000394c0:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 000394d0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 000394e0:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 77, 15 lines modified | Offset 77, 15 lines modified | ||
| 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 77 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 78 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 79 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 80 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 81 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 82 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 83 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 84 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 85 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 86 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 87 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 88 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 89 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 90 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 91 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00039190:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 000391a0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 000391b0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 000391c0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 000391d0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000391e0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2028·6173·206f·6620·3230·323 | 00039200:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00039210:·323 | 00039210:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00039220:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00039230:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00039240:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00039250:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00039260:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00039270:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku | 00039280:·7570·5f6f·7065·6e73·6869·6674·223e·4b75··up_openshift">Ku |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 77 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 78 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 79 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14618, 16 lines modified | Offset 14618, 16 lines modified | ||
| 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00039190:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000391a0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 000391b0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 000391c0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 000391d0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 000391e0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000391f0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039200:·2020·2020·2861·7320·6f66·2032·3032·3 | 00039200:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00039210:·303 | 00039210:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00039220:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00039230:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00039240:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00039250:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00039260:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00039270:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" | 00039280:·6772·6f75·705f·6f70·656e·7368·6966·7422··group_openshift" |
| Offset 66, 15 lines modified | Offset 66, 15 lines modified | ||
| 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 66 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 67 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 68 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 69 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 70 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 71 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 72 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 73 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 74 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 76 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 77 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 78 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 79 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 80 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fb0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fc0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038fd0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038fe0:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038ff0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039000:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039010:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039020:·2032·3032·3 | 00039020:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039030:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039040:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039050:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039060:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039070:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00039080:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 00039090:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8n_\x8e_\x8m_\x8e_\x8n_\x8t |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038fb0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00038fc0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00038fd0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00038fe0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00038ff0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00039000:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00039010:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00039020:·6173·206f·6620·3230·323 | 00039020:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00039030:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00039040:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00039050:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00039060:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00039070:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00039080:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00039090:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8W_\x8o_\x8r_\x8k_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038fb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038fc0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038fd0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038fe0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038ff0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00039000:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00039010:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00039020:·6620·3230·323 | 00039020:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00039030:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00039040:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00039050:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00039060:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00039070:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00039080:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope | 00039090:·6f6e·7465·6e74·5f67·726f·7570·5f6f·7065··ontent_group_ope |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ·········1.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8L_\x8o_\x8g_\x8g_\x8i_\x8n_\x8g_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14588, 15 lines modified | Offset 14588, 15 lines modified | ||
| 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038fb0:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038fc0:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038fd0:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038fe0:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038ff0:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00039000:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00039010:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 00039020:·3 | 00039020:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 00039030:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 00039040:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 00039050:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 00039060:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 00039070:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00039080:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif | 00039090:·745f·6772·6f75·705f·6f70·656e·7368·6966··t_group_openshif |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 72 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038fd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038fe0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038ff0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00039000:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00039010:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00039020:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00039030:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00039040:·2032·3032·3 | 00039040:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00039050:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00039060:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00039070:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00039080:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00039090:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000390a0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open | 000390b0:·6e74·656e·745f·6772·6f75·705f·6f70·656e··ntent_group_open |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14589, 16 lines modified | Offset 14589, 16 lines modified | ||
| 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00038fc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00038fd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00038fe0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00038ff0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00039000:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00039010:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00039020:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00039030:·2020·2020·2028·6173·206f·6620·3230·323 | 00039030:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00039040:·2d30·3 | 00039040:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00039050:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00039060:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00039070:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00039080:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00039090:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 000390a0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift | 000390b0:·5f67·726f·7570·5f6f·7065·6e73·6869·6674··_group_openshift |
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 60 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 70 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 71 | ·········2.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8e_\x8t_\x8c_\x8d_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s | 72 | ·········3.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8G_\x8e_\x8n_\x8e_\x8r_\x8a_\x8l_\x8·_\x8S_\x8e_\x8c_\x8u_\x8r_\x8i_\x8t_\x8y_\x8·_\x8P_\x8r_\x8a_\x8c_\x8t_\x8i_\x8c_\x8e_\x8s |
| 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 73 | ·········4.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8K_\x8u_\x8b_\x8e_\x8l_\x8e_\x8t_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 74 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8-_\x8·_\x8M_\x8a_\x8s_\x8t_\x8e_\x8r_\x8·_\x8N_\x8o_\x8d_\x8e_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00038fd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038fe0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038ff0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00039000:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00039010:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00039020:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00039030:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00039040:·206f·6620·3230·323 | 00039040:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00039050:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00039060:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00039070:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00039080:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00039090:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000390a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o | 000390b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f6f··.content_group_o |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14590, 15 lines modified | Offset 14590, 15 lines modified | ||
| 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038fd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038fe0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038ff0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00039000:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00039010:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00039020:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00039030:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00039040:·3032·3 | 00039040:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00039050:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00039060:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00039070:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00039080:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00039090:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 000390a0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh | 000390b0:·656e·745f·6772·6f75·705f·6f70·656e·7368··ent_group_opensh |
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 | 61 | ····*·cpe:/a:redhat:openshift_container_platform:4.6 |
| 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 | 62 | ····*·cpe:/a:redhat:openshift_container_platform:4.7 |
| 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 | 63 | ····*·cpe:/a:redhat:openshift_container_platform:4.8 |
| 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 | 64 | ····*·cpe:/a:redhat:openshift_container_platform:4.9 |
| 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 | 65 | ····*·cpe:/a:redhat:openshift_container_platform:4.1 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y | 71 | ·········1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8a_\x8n_\x8d_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e_\x8·_\x8I_\x8n_\x8t_\x8e_\x8g_\x8r_\x8i_\x8t_\x8y |
| 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8-_\x8·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 73 | ·········3.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8K_\x8u_\x8b_\x8e_\x8·_\x8A_\x8P_\x8I_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8A_\x8u_\x8t_\x8h_\x8e_\x8n_\x8t_\x8i_\x8c_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 75 | ·········5.·_\x8O_\x8p_\x8e_\x8n_\x8S_\x8h_\x8i_\x8f_\x8t_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l_\x8l_\x8e_\x8r_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e50:·3 | 00037e50:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15053, 203 lines modified | Offset 15053, 203 lines modified | ||
| 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003acc0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 0003acd0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ace0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003acf0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ad00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ad10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ad20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003ad30:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003ad40:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003ad50:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ad | 0003ad40:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003ad50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad80:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003ad90:·3634·3122·3e3c·7072·653e·3c63·6f64·653e··641"><pre><code> | |||
| 0003ada0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003adb0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003adc0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003add0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003ade0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003adf0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003ae00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003ae10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003ae20:·3536·3432·2220·7461·6269·6e64·6578·3d22··5642"·tabindex=" | |||
| 0003ae30:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003ae40:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003ae50:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003ae60:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003ae70:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003ae80:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 0003ae90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003aea0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003a | 0003aeb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003aec0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003aed0:·3536·3432·223e·3c74·6162·6c65·2063·6c61··5642"><table·cla | |||
| 0003aee0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003aef0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003af00:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003af10:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003af20:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003ad80:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 0003ad90:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ada0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003adb0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003adc0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003add0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ade0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae00:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003a | 0003af30:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003ae20:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a | 0003af40:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003af50:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a | 0003af60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003af70:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003af80:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003af90:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003afa0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003ae50:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae60:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae70:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae80:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003ae90:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003aea0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003aeb0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003aec0:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003aed0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003aee0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003aef0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003af00:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003af10:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003af20:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003af30:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 0003af40:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003af50:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 0003af60:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 0003af70:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003af80:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003af90:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003afa0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003afb0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003afc0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003afd0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003afe0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003aff0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b000:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b010:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b020:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b030:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b040:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b050:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b060:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b070:·7461·7267·6574·3d22·2369·646d·3536·3432··target="#idm5642 | |||
| 0003b080:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b090:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b0a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b0b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b0c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b0d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b0e0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b0f0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b100:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b110:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b120:·6522·2069·643d·2269·646d·3536·3432·223e··e"·id="idm5642"> | |||
| 0003b130:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b140:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b150:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b160:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b170:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| Max diff block lines reached; 1674872/1702802 bytes (98.36%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 26 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 138 | ··package: |
| Offset 137, 31 lines modified | Offset 149, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 164, 26 lines modified | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | 164 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 170 | ····yum·install·-y·"aide" | 165 | ····yum·install·-y·"aide" |
| 171 | fi | 166 | fi |
| 172 | else | 167 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 169 | fi |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | ||
| 180 | 176 | class·install_aide·{ | |
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 352, 14 lines modified | Offset 352, 17 lines modified | ||
| 352 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 352 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 353 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 353 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 354 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 354 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 355 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 355 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- | 356 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- |
| 357 | ···························00223 | 357 | ···························00223 |
| 358 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 | 358 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 360 | package·--add=dracut-fips-aesni | ||
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 362 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 361 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 363 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 362 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 364 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 363 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 365 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 364 | -·name:·Check·if·system·supports·AES-NI | 366 | -·name:·Check·if·system·supports·AES-NI |
| 365 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo | 367 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo |
| Offset 422, 17 lines modified | Offset 425, 14 lines modified | ||
| 422 | ········yum·install·-y·"dracut-fips-aesni" | 425 | ········yum·install·-y·"dracut-fips-aesni" |
| 423 | ····fi | 426 | ····fi |
| 424 | fi | 427 | fi |
| 425 | else | 428 | else |
| 426 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 429 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 427 | fi | 430 | fi |
| Max diff block lines reached; 110188/116022 bytes (94.97%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e50:·3 | 00037e50:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15060, 202 lines modified | Offset 15060, 202 lines modified | ||
| 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | 0003ad30:·6765·743d·2223·6964·6d35·3634·3122·2074··get="#idm5641"·t | ||
| 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ad40:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ad50:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ad60:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003ad70:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003ad80:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003ad90:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003ada0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003adb0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adc0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003add0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ade0:·2069·643d·2269·646d·3536·3431·223e·3c74···id="idm5641"><t | |||
| 0003adf0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ae00:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae10:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae20:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae30:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003ae40:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003ae50:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003a | 0003ada0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003adb0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003adc0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003add0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003ade0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003adf0:·646d·3536·3431·223e·3c70·7265·3e3c·636f··dm5641"><pre><co | |||
| 0003ae00:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003ae10:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003ae20:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003ae30:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003ae40:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003ae50:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003ae60:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003ae70:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003ae80:·6964·6d35·3634·3222·2074·6162·696e·6465··idm5642"·tabinde | |||
| 0003ae90:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003aea0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003aeb0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003aec0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003aed0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003aee0:·656d·6564·6961·7469·6f6e·2041·6e61·636f··emediation·Anaco | |||
| 0003aef0:·6e64·6120·736e·6970·7065·7420·e287·b23c··nda·snippet·...< | |||
| 0003af00:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003af10:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003af20:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003af30:·6964·6d35·3634·3222·3e3c·7461·626c·6520··idm5642"><table· | |||
| 0003af40:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003af50:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003af60:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003af70:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003af80:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003a | 0003af90:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003ae80:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003a | 0003afa0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003afb0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003a | 0003afc0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003afd0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003afe0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003aff0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b000:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003aeb0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aec0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003aed0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003aee0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003aef0:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003af00:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003af10:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003af20:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003af30:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003af40:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003af50:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003af60:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003af70:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003af80:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003af90:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003afa0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003afb0:·4449·5341·2d53·5449·472d·4f4c·3037·2d30··DISA-STIG-OL07-0 | |||
| 0003afc0:·302d·3032·3030·3239·0a20·202d·204e·4953··0-020029.··-·NIS | |||
| 0003afd0:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003afe0:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003aff0:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b000:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b010:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b020:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b030:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b040:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b050:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b060:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b070:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b080:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b090:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b0a0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b0b0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b0c0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b0d0:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003b0e0:·3634·3222·2074·6162·696e·6465·783d·2230··642"·tabindex="0 | |||
| 0003b0f0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b100:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b110:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b120:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b130:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b140:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003b150:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b160:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b170:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b180:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 0003b190:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b1a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b1b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b1c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b1d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| Max diff block lines reached; 1754450/1782242 bytes (98.44%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 26 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 139 | ··package: |
| Offset 138, 31 lines modified | Offset 150, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 152 | ··-·low_complexity |
| 141 | ··-·low_disruption | 153 | ··-·low_disruption |
| 142 | ··-·medium_severity | 154 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_aide | ||
| 151 | class·install_aide·{ | ||
| 152 | ··package·{·'aide': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 170, 21 lines modified | Offset 165, 26 lines modified | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | 165 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 171 | ····yum·install·-y·"aide" | 166 | ····yum·install·-y·"aide" |
| 172 | fi | 167 | fi |
| 173 | else | 168 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 170 | fi |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | include·install_aide | ||
| 181 | 177 | class·install_aide·{ | |
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 884, 14 lines modified | Offset 884, 17 lines modified | ||
| 884 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 884 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 885 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 885 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 886 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 886 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 887 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 888 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- | 888 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS- |
| 889 | ···························00223 | 889 | ···························00223 |
| 890 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 | 890 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R1 |
| 891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 892 | package·--add=dracut-fips-aesni | ||
| 891 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 892 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 893 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 894 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 895 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 896 | -·name:·Check·if·system·supports·AES-NI | 898 | -·name:·Check·if·system·supports·AES-NI |
| 897 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo | 899 | ··command:·grep·-q·-m1·-o·aes·/proc/cpuinfo |
| Offset 954, 17 lines modified | Offset 957, 14 lines modified | ||
| 954 | ········yum·install·-y·"dracut-fips-aesni" | 957 | ········yum·install·-y·"dracut-fips-aesni" |
| 955 | ····fi | 958 | ····fi |
| 956 | fi | 959 | fi |
| 957 | else | 960 | else |
| 958 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 961 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 959 | fi | 962 | fi |
| Max diff block lines reached; 119165/125011 bytes (95.32%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e60:·3 | 00037e60:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15044, 203 lines modified | Offset 15044, 203 lines modified | ||
| 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ac30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | 0003ac40:·743d·2223·6964·6d35·3634·3122·2074·6162··t="#idm5641"·tab | ||
| 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ac50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ac60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ac70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ac80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ac90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003aca0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003acb0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003acc0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003acd0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ace0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003acf0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ad00:·3536·3431·223e·3c70·7265·3e3c·636f·6465··5641"><pre><code | |||
| 0003ad10:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003ad20:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003ad30:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003ad40:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003ad50:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003ad60:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003ad70:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003ad80:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003ad90:·6d35·3634·3222·2074·6162·696e·6465·783d··m5642"·tabindex= | |||
| 0003ada0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003adb0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003adc0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003add0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003ade0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003adf0:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0003ae00:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 0003ae10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003ae20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003ae30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ae40:·6d35·3634·3222·3e3c·7461·626c·6520·636c··m5642"><table·cl | |||
| 0003ae50:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ae60:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ae70:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ae80:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003ae90:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003aea0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003aec0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003aed0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003aee0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003aef0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003af00:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003af10:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003af20:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003af30:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003af40:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003af50:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003af60:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003af70:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003af80:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003af90:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003afa0:·6765·743d·2223·6964·6d35·3634·3322·2074··get="#idm5643"·t | |||
| 0003afb0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003afc0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003afd0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003afe0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003aff0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b000:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003 | 0003b010:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003acc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003acd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ace0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003acf0:·643d·2269·646d·3536·3431·223e·3c74·6162··d="idm5641"><tab | |||
| 0003ad00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ad60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003ad70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003ad80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003ad90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ada0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003adb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003adc0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003add0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ade0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003adf0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003ae00:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003ae10:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003ae20:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003ae30:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003ae40:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003ae50:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003ae60:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003ae70:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003ae80:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003ae90:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003aea0:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003aeb0:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003aec0:·5341·2d53·5449·472d·4f4c·3037·2d30·302d··SA-STIG-OL07-00- | |||
| 0003aed0:·3032·3030·3239·0a20·202d·204e·4953·542d··020029.··-·NIST- | |||
| 0003aee0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003aef0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003af00:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003af10:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003af20:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003af30:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003af40:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003af50:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003af60:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003af70:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003af80:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003af90:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003afa0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| Max diff block lines reached; 1498653/1526583 bytes (98.17%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 135, 31 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 162, 26 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 162 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····yum·install·-y·"aide" | 163 | ····yum·install·-y·"aide" |
| 169 | fi | 164 | fi |
| 170 | else | 165 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 167 | fi |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 493, 14 lines modified | Offset 493, 21 lines modified | ||
| 493 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 493 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 494 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 494 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 495 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 495 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 496 | ············/tmp·directory·is·wiped·during·reboot. | 496 | ············/tmp·directory·is·wiped·during·reboot. |
| 497 | Severity: ··low | 497 | Severity: ··low |
| 498 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 498 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 499 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 499 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 505 | services·--enabled=tmp.mount | ||
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 505 | -·name:·Enable·mount·tmp | 511 | -·name:·Enable·mount·tmp |
| 506 | ··ansible.builtin.systemd: | 512 | ··ansible.builtin.systemd: |
| Offset 528, 21 lines modified | Offset 535, 14 lines modified | ||
| 528 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 535 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 529 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 536 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 530 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 537 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 91258/97093 bytes (93.99%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037dd0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037de0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037df0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e00:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e10:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e20:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e30:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e40:·6f66·2032·3032·3 | 00037e40:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037e50:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e60:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e70:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e80:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e90:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ea0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037eb0:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 47013, 175 lines modified | Offset 47013, 175 lines modified | ||
| 000b7a40:·6172·6765·743d·2223·6964·6d33·3735·3932··arget="#idm37592 | 000b7a40:·6172·6765·743d·2223·6964·6d33·3735·3932··arget="#idm37592 | ||
| 000b7a50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000b7a50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000b7a60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000b7a60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000b7a70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000b7a70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000b7a80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000b7a80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000b7a90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000b7a90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000b7aa0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000b7aa0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000b7ab0:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 000b7ab0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000b7ac0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000b7ad0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000b7ae0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000b7af0:·7365·2220·6964·3d22·6964·6d33·3735·3932··se"·id="idm37592 | |||
| 000b7b00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 000b7b10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000b7b20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000b7b30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000b7b40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000b7b50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 000b7b60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000b7b70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000b7b80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000b7b90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000b7ba0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 000b7bb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 000b7bc0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 000b7bd0:·7468·3e3c·7464·3e64·6973·6162·6c65·3c2f··th><td>disable</ | |||
| 000b7be0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 000b7bf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 000b7c00:·653a·2045·6e73·7572·6520·6468·6370·2069··e:·Ensure·dhcp·i | |||
| 000b7c10:·7320·7265·6d6f·7665·640a·2020·7061·636b··s·removed.··pack | |||
| 000b7c20:·6167·653a·0a20·2020·206e·616d·653a·2064··age:.····name:·d | |||
| 000b7c30:·6863·700a·2020·2020·7374·6174·653a·2061··hcp.····state:·a | |||
| 000b7c40:·6273·656e·740a·2020·7461·6773·3a0a·2020··bsent.··tags:.·· | |||
| 000b7c50:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 000b7c60:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | |||
| 000b7c70:·3030·2d35·332d·434d·2d37·2861·290a·2020··00-53-CM-7(a).·· | |||
| 000b7c80:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 000b7c90:·2d37·2862·290a·2020·2d20·5043·492d·4453··-7(b).··-·PCI-DS | |||
| 000b7ca0:·5376·342d·322e·322e·340a·2020·2d20·6469··Sv4-2.2.4.··-·di | |||
| 000b7cb0:·7361·626c·655f·7374·7261·7465·6779·0a20··sable_strategy.· | |||
| 000b7cc0:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 000b7cd0:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 000b7ce0:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 000b7cf0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 000b7d00:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 000b7d10:·2d20·7061·636b·6167·655f·6468·6370·5f72··-·package_dhcp_r | |||
| 000b7d20:·656d·6f76·6564·0a3c·2f63·6f64·653e·3c2f··emoved.</code></ | |||
| 000b7d30:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 000b7d40:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 000b7d50:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 000b7d60:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 000b7d70:·2d74·6172·6765·743d·2223·6964·6d33·3735··-target="#idm375 | |||
| 000b7d80:·3933·2220·7461·6269·6e64·6578·3d22·3022··93"·tabindex="0" | |||
| 000b7d90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 000b7da0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 000b7db0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 000b7dc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 000b7dd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000b7de0:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 000b7 | 000b7ac0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 000b7 | 000b7ad0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 000b7 | 000b7ae0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 000b7 | 000b7af0:·7073·6522·2069·643d·2269·646d·3337·3539··pse"·id="idm3759 | ||
| 000b7 | 000b7b00:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | ||
| 000b7 | 000b7b10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 000b7 | 000b7b20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 000b7 | 000b7b30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 000b7 | 000b7b40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 000b7 | 000b7b50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 000b7 | 000b7b60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 000b7 | 000b7b70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 000b7 | 000b7b80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 000b7 | 000b7b90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 000b7 | 000b7ba0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 000b7 | 000b7bb0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 000b7 | 000b7bc0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 000b7 | 000b7bd0:·2f74·683e·3c74·643e·6469·7361·626c·653c··/th><td>disable< | ||
| 000b7 | 000b7be0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 000b7 | 000b7bf0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | ||
| 000b7c00:·6b61·6765·202d·2d72·656d·6f76·653d·6468··kage·--remove=dh | |||
| 000b7c10:·6370·0a3c·2f63·6f64·653e·3c2f·7072·653e··cp.</code></pre> | |||
| 000b7c20:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 000b7c30:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 000b7c40:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 000b7c50:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 000b7c60:·6765·743d·2223·6964·6d33·3735·3933·2220··get="#idm37593"· | |||
| 000b7c70:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000b7c80:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 000b7c90:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 000b7ca0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 000b7cb0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 000b7cc0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 000b7cd0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 000b7ce0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 000b7f30:·7564·6520·7265·6d6f·7665·5f64·6863·700a··ude·remove_dhcp. | |||
| 000b7f40:·0a63·6c61·7373·2072·656d·6f76·655f·6468··.class·remove_dh | |||
| 000b7f50:·6370·207b·0a20·2070·6163·6b61·6765·207b··cp·{.··package·{ | |||
| 000b7f60:·2027·6468·6370·273a·0a20·2020·2065·6e73···'dhcp':.····ens | |||
| 000b7f70:·7572·6520·3d26·6774·3b20·2770·7572·6765··ure·=>·'purge | |||
| 000b7f80:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 000b7f90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000b7fa0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 000b7fb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 000b7fc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 000b7fd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 000b7fe0:·3337·3539·3422·2074·6162·696e·6465·783d··37594"·tabindex= | |||
| 000b7ff0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 000b8000:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 000b8010:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 000b8020:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| Max diff block lines reached; 285996/309924 bytes (92.28%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_nt28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 10111, 14 lines modified | Offset 10111, 21 lines modified | ||
| 10111 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10111 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10112 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10113 | ···························A.9.1.2 | 10113 | ···························A.9.1.2 |
| 10114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 10117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 10118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10123 | package·--remove=dhcp | ||
| 10118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10123 | -·name:·Ensure·dhcp·is·removed | 10129 | -·name:·Ensure·dhcp·is·removed |
| 10124 | ··package: | 10130 | ··package: |
| Offset 10131, 26 lines modified | Offset 10138, 14 lines modified | ||
| 10131 | ··-·PCI-DSSv4-2.2.4 | 10138 | ··-·PCI-DSSv4-2.2.4 |
| 10132 | ··-·disable_strategy | 10139 | ··-·disable_strategy |
| 10133 | ··-·low_complexity | 10140 | ··-·low_complexity |
| 10134 | ··-·low_disruption | 10141 | ··-·low_disruption |
| 10135 | ··-·medium_severity | 10142 | ··-·medium_severity |
| 10136 | ··-·no_reboot_needed | 10143 | ··-·no_reboot_needed |
| 10137 | ··-·package_dhcp_removed | 10144 | ··-·package_dhcp_removed |
| 10138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10143 | include·remove_dhcp | ||
| 10144 | class·remove_dhcp·{ | ||
| 10145 | ··package·{·'dhcp': | ||
| 10146 | ····ensure·=>·'purged', | ||
| 10147 | ··} | ||
| 10148 | } | ||
| 10149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 10145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 10150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10154 | #·CAUTION:·This·remediation·script·will·remove·dhcp | 10150 | #·CAUTION:·This·remediation·script·will·remove·dhcp |
| Offset 10160, 21 lines modified | Offset 10155, 26 lines modified | ||
| 10160 | #» ···system! | 10155 | #» ···system! |
| 10161 | if·rpm·-q·--quiet·"dhcp"·;·then | 10156 | if·rpm·-q·--quiet·"dhcp"·;·then |
| 10162 | ····yum·remove·-y·"dhcp" | 10157 | ····yum·remove·-y·"dhcp" |
| 10163 | fi | 10158 | fi |
| 10164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 10159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10164 | include·remove_dhcp | ||
| 10169 | 10165 | class·remove_dhcp·{ | |
| 10166 | ··package·{·'dhcp': | ||
| 10167 | ····ensure·=>·'purged', | ||
| 10168 | ··} | ||
| 10169 | } | ||
| 10170 | Group ·Mail·Server·Software· Group·contains·1·rule | 10170 | Group ·Mail·Server·Software· Group·contains·1·rule |
| 10171 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very | 10171 | _\x8[_\x8r_\x8e_\x8f_\x8] ·Mail·servers·are·used·to·send·and·receive·email·over·the·network.·Mail·is·a·very |
| 10172 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure | 10172 | common·service,·and·Mail·Transfer·Agents·(MTAs)·are·obvious·targets·of·network·attack.·Ensure |
| 10173 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as | 10173 | that·systems·are·not·running·MTAs·unnecessarily,·and·configure·needed·MTAs·as·defensively·as |
| 10174 | possible. | 10174 | possible. |
| 10175 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. | 10175 | Very·few·systems·at·any·site·should·be·configured·to·directly·receive·email·over·the·network. |
| Offset 10212, 14 lines modified | Offset 10212, 21 lines modified | ||
| 10212 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10212 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10213 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10213 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10214 | ···························A.9.1.2 | 10214 | ···························A.9.1.2 |
| 10215 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10215 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10216 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10216 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227,·SRG-OS-000095-GPOS-00049 | 10217 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227,·SRG-OS-000095-GPOS-00049 |
| 10218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10218 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10224 | package·--remove=sendmail | ||
| 10219 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10225 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10220 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10226 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10221 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10227 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10222 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10228 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10223 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10229 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10224 | -·name:·Ensure·sendmail·is·removed | 10230 | -·name:·Ensure·sendmail·is·removed |
| 10225 | ··package: | 10231 | ··package: |
| Offset 10233, 26 lines modified | Offset 10240, 14 lines modified | ||
| 10233 | ··-·NIST-800-53-CM-7(b) | 10240 | ··-·NIST-800-53-CM-7(b) |
| 10234 | ··-·disable_strategy | 10241 | ··-·disable_strategy |
| 10235 | ··-·low_complexity | 10242 | ··-·low_complexity |
| 10236 | ··-·low_disruption | 10243 | ··-·low_disruption |
| 10237 | ··-·medium_severity | 10244 | ··-·medium_severity |
| 10238 | ··-·no_reboot_needed | 10245 | ··-·no_reboot_needed |
| 10239 | ··-·package_sendmail_removed | 10246 | ··-·package_sendmail_removed |
| 10240 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10241 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10242 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10243 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10244 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10245 | include·remove_sendmail | ||
| Max diff block lines reached; 33556/39091 bytes (85.84%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16434, 203 lines modified | Offset 16434, 203 lines modified | ||
| 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040310:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00040320:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040330:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040340:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040350:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040360:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040370:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00040380:·6564·6961·7469·6f6e·204 | 00040380:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00040390:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000403a0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000403b0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000403c0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000403d0:·3536·3431·223e·3c74·6162·6c65·2063·6c61··5641"><table·cla | |||
| 000403e0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000403f0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040400:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040410:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040420:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040430:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040 | 00040390:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 000403a0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 000403b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 000403c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 000403d0:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | |||
| 000403e0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 000403f0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00040400:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00040410:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00040420:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040430:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040440:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040450:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040460:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 00040470:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040480:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040490:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000404a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000404b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000404c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 000404d0:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 000404e0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000404f0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00040500:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00040510:·7365·2220·6964·3d22·6964·6d35·3634·3222··se"·id="idm5642" | |||
| 00040520:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00040530:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00040540:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00040550:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00040560:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00040 | 00040570:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00040 | 00040580:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00040470:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00040480:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040 | 00040590:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 000405a0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000405b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00040 | 000405c0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 000405d0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 000405e0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 000405f0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00040600:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00040610:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00040620:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 000404b0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000404c0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000404d0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 000404e0:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 000404f0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00040500:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00040510:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00040520:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00040530:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00040540:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00040550:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00040560:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00040570:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00040580:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 00040590:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 000405a0:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 000405b0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000405c0:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 000405d0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 000405e0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 000405f0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040600:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040610:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040620:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040630:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040640:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040650:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 00040660:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 000406 | 00040630:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 000406 | 00040640:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 000406 | 00040650:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 000406 | 00040660:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 000406 | 00040670:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 000406 | 00040680:·6964·6d35·3634·3322·2074·6162·696e·6465··idm5643"·tabinde | ||
| 000406 | 00040690:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 000406 | 000406a0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 000406 | 000406b0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00040 | 000406c0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00040 | 000406d0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000406e0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 000406f0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00040720:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00040730:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 00040740:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040750:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00040760:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00040770:·3d22·6964·6d35·3634·3222·3e3c·7461·626c··="idm5642"><tabl | |||
| 00040780:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| Max diff block lines reached; 246998/274790 bytes (89.89%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:7 | 44 | ····*·cpe:/o:oracle:linux:7 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 422, 14 lines modified | Offset 422, 26 lines modified | ||
| 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 422 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 423 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 424 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 425 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 426 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 427 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 428 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 430 | [[packages]] | ||
| 431 | name·=·"aide" | ||
| 432 | version·=·"*" | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 438 | package·--add=aide | ||
| 429 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 430 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 431 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 432 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 433 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 434 | -·name:·Ensure·aide·is·installed | 444 | -·name:·Ensure·aide·is·installed |
| 435 | ··package: | 445 | ··package: |
| Offset 444, 31 lines modified | Offset 456, 14 lines modified | ||
| 444 | ··-·PCI-DSSv4-11.5.2 | 456 | ··-·PCI-DSSv4-11.5.2 |
| 445 | ··-·enable_strategy | 457 | ··-·enable_strategy |
| 446 | ··-·low_complexity | 458 | ··-·low_complexity |
| 447 | ··-·low_disruption | 459 | ··-·low_disruption |
| 448 | ··-·medium_severity | 460 | ··-·medium_severity |
| 449 | ··-·no_reboot_needed | 461 | ··-·no_reboot_needed |
| 450 | ··-·package_aide_installed | 462 | ··-·package_aide_installed |
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 456 | include·install_aide | ||
| 457 | class·install_aide·{ | ||
| 458 | ··package·{·'aide': | ||
| 459 | ····ensure·=>·'installed', | ||
| 460 | ··} | ||
| 461 | } | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 463 | [[packages]] | ||
| 464 | name·=·"aide" | ||
| 465 | version·=·"*" | ||
| 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 471 | #·Remediation·is·applicable·only·in·certain·platforms | 468 | #·Remediation·is·applicable·only·in·certain·platforms |
| 472 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 469 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 476, 21 lines modified | Offset 471, 26 lines modified | ||
| 476 | if·!·rpm·-q·--quiet·"aide"·;·then | 471 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 477 | ····yum·install·-y·"aide" | 472 | ····yum·install·-y·"aide" |
| 478 | fi | 473 | fi |
| 479 | else | 474 | else |
| 480 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 475 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 481 | fi | 476 | fi |
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 482 | include·install_aide | ||
| 487 | 483 | class·install_aide·{ | |
| 484 | ··package·{·'aide': | ||
| 485 | ····ensure·=>·'installed', | ||
| 486 | ··} | ||
| 487 | } | ||
| 488 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 488 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 489 | Run·the·following·command·to·generate·a·new·database: | 489 | Run·the·following·command·to·generate·a·new·database: |
| 490 | $·sudo·/usr/sbin/aide·--init | 490 | $·sudo·/usr/sbin/aide·--init |
| 491 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 491 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 492 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 492 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 493 | To·initiate·a·manual·check,·run·the·following·command: | 493 | To·initiate·a·manual·check,·run·the·following·command: |
| 494 | $·sudo·/usr/sbin/aide·--check | 494 | $·sudo·/usr/sbin/aide·--check |
| Offset 4681, 38 lines modified | Offset 4681, 14 lines modified | ||
| 4681 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 4681 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 4682 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 4682 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 4683 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 4683 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 4684 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 4684 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 4685 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 | 4685 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 |
| 4686 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 4686 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 4687 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule | 4687 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule |
| 4688 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4689 | --- | ||
| 4690 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 4691 | kind:·MachineConfig | ||
| 4692 | spec: | ||
| 4693 | ··config: | ||
| 4694 | ····ignition: | ||
| 4695 | ······version:·3.1.0 | ||
| 4696 | ····storage: | ||
| 4697 | ······files: | ||
| 4698 | ······-·contents: | ||
| 4699 | ··········source: | ||
| 4700 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 4701 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 4702 | ········mode:·0644 | ||
| 4703 | ········path:·/etc/pam.d/password-auth | ||
| 4704 | ········overwrite:·true | ||
| 4705 | ······-·contents: | ||
| Max diff block lines reached; 21442/35391 bytes (60.59%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 232 lines modified | Offset 15073, 232 lines modified | ||
| 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ae00:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ae10:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ae20:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003ae30:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003ae40:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003ae50:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003ae60:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ae70:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003ae80:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ae90:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003aea0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003aeb0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003aec0:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003aed0:·3137·3222·3e3c·7072·653e·3c63·6f64·653e··172"><pre><code> | |||
| 0003aee0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003aef0:·6d65·203d·2022·6472·6163·7574·2d66·6970··me·=·"dracut-fip | |||
| 0003af00:·7322·0a76·6572·7369·6f6e·203d·2022·2a22··s".version·=·"*" | |||
| 0003af10:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003af20:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003af30:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003af40:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003af50:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003af60:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | |||
| 0003af70:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003af80:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003af90:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003afa0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003afb0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003afc0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003afd0:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b010:·6964·3d22·6964·6d36·3137·3322·3e3c·7461··id="idm6173"><ta | |||
| 0003b020:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b030:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b040:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b050:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b060:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b070:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b080:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b090:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b0a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b0c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b0d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b100:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b110:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003b120:·6164·643d·6472·6163·7574·2d66·6970·730a··add=dracut-fips. | |||
| 0003b130:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b140:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b150:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b160:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b170:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b180:·3d22·2369·646d·3631·3734·2220·7461·6269··="#idm6174"·tabi | |||
| 0003b190:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b1a0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b1b0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b1c0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b1d0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003b1e0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003 | 0003b1f0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003ae90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aea0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aeb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aec0:·3d22·6964·6d36·3137·3222·3e3c·7461·626c··="idm6172"><tabl | |||
| 0003aed0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aee0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003aef0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003af20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003af30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003af40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003af50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003af70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003af80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003af90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003afa0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003afb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003afc0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003afd0:·6520·6472·6163·7574·2d66·6970·7320·6973··e·dracut-fips·is | |||
| 0003afe0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003aff0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b000:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | |||
| 0003b010:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b020:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | |||
| 0003b030:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b040:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b050:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b060:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b070:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b080:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | |||
| 0003b090:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | |||
| 0003b0a0:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | |||
| 0003b0b0:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | |||
| 0003b0c0:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | |||
| 0003b0d0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b0e0:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b0f0:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b100:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b110:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b120:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003b130:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | |||
| 0003b140:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | |||
| 0003b150:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003b160:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | |||
| 0003b170:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| Max diff block lines reached; 1205977/1237771 bytes (97.43%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:7 | 54 | ····*·cpe:/o:oracle:linux:7 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 99, 14 lines modified | Offset 99, 26 lines modified | ||
| 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 99 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 100 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 101 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 102 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 103 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 105 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 107 | [[packages]] | ||
| 108 | name·=·"dracut-fips" | ||
| 109 | version·=·"*" | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 115 | package·--add=dracut-fips | ||
| 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 111 | -·name:·Ensure·dracut-fips·is·installed | 121 | -·name:·Ensure·dracut-fips·is·installed |
| 112 | ··package: | 122 | ··package: |
| Offset 128, 31 lines modified | Offset 140, 14 lines modified | ||
| 128 | ··-·NIST-800-53-SC-13 | 140 | ··-·NIST-800-53-SC-13 |
| 129 | ··-·enable_strategy | 141 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 142 | ··-·low_complexity |
| 131 | ··-·low_disruption | 143 | ··-·low_disruption |
| 132 | ··-·medium_severity | 144 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 145 | ··-·no_reboot_needed |
| 134 | ··-·package_dracut-fips_installed | 146 | ··-·package_dracut-fips_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | include·install_dracut-fips | ||
| 141 | class·install_dracut-fips·{ | ||
| 142 | ··package·{·'dracut-fips': | ||
| 143 | ····ensure·=>·'installed', | ||
| 144 | ··} | ||
| 145 | } | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"dracut-fips" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 155 | #·Remediation·is·applicable·only·in·certain·platforms | 152 | #·Remediation·is·applicable·only·in·certain·platforms |
| 156 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 153 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 160, 21 lines modified | Offset 155, 26 lines modified | ||
| 160 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | 155 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then |
| 161 | ····yum·install·-y·"dracut-fips" | 156 | ····yum·install·-y·"dracut-fips" |
| 162 | fi | 157 | fi |
| 163 | else | 158 | else |
| 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 159 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 165 | fi | 160 | fi |
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | include·install_dracut-fips | ||
| 171 | 167 | class·install_dracut-fips·{ | |
| 168 | ··package·{·'dracut-fips': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 172 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 173 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 174 | $·sudo·yum·install·dracut-fips | 174 | $·sudo·yum·install·dracut-fips |
| 175 | dracut·-f | 175 | dracut·-f |
| 176 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 176 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 177 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 177 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 178 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 178 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 202, 14 lines modified | Offset 202, 17 lines modified | ||
| 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 207 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 208 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 210 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 214 | -·name:·Gather·the·package·facts | 216 | -·name:·Gather·the·package·facts |
| 215 | ··package_facts: | 217 | ··package_facts: |
| Offset 693, 17 lines modified | Offset 696, 14 lines modified | ||
| 693 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 696 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 694 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 697 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 695 | fi | 698 | fi |
| 696 | else | 699 | else |
| 697 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 700 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 698 | fi | 701 | fi |
| Max diff block lines reached; 80930/87558 bytes (92.43%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037e00:·2d32·3 | 00037e00:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 18220, 273 lines modified | Offset 18220, 273 lines modified | ||
| 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | 000472b0:·2d74·6172·6765·743d·2223·6964·6d39·3837··-target="#idm987 | ||
| 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | 000472c0:·3822·2074·6162·696e·6465·783d·2230·2220··8"·tabindex="0"· | ||
| 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 000472d0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000472e0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000472f0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00047300:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00047310:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00047320:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 00047330:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00047340:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00047350:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00047360:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00047370:·643d·2269·646d·3938·3738·223e·3c70·7265··d="idm9878"><pre | |||
| 00047380:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00047390:·6573·5d5d·0a6e·616d·6520·3d20·2272·6561··es]].name·=·"rea | |||
| 000473a0:·7222·0a76·6572·7369·6f6e·203d·2022·2a22··r".version·=·"*" | |||
| 000473b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000473c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000473d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000473e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000473f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00047400:·743d·2223·6964·6d39·3837·3922·2074·6162··t="#idm9879"·tab | |||
| 00047410:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00047420:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00047430:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00047440:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00047450:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00047460:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00047470:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 00047480:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00047490:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000474a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000474b0:·6964·3d22·6964·6d39·3837·3922·3e3c·7461··id="idm9879"><ta | |||
| 000474c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 000474d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 000474e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 000474f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00047500:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00047510:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00047520:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00047530:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00047540:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00047550:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00047560:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00047570:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00047580:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00047590:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 000475a0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000475b0:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 000475c0:·6164·643d·7265·6172·0a3c·2f63·6f64·653e··add=rear.</code> | |||
| 000475d0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 000475e0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 000475f0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00047600:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00047610:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | |||
| 00047620:·3838·3022·2074·6162·696e·6465·783d·2230··880"·tabindex="0 | |||
| 00047630:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00047640:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00047650:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00047660:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00047670:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00047 | 00047680:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | ||
| 00047 | 00047690:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 00047 | 000476a0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 00047 | 000476b0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 00047 | 000476c0:·6c61·7073·6522·2069·643d·2269·646d·3938··lapse"·id="idm98 | ||
| 00047 | 000476d0:·3830·223e·3c74·6162·6c65·2063·6c61·7373··80"><table·class | ||
| 00047 | 000476e0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 00047 | 000476f0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 00047 | 00047700:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 00047 | 00047710:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 00047 | 00047720:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 00047 | 00047730:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00047 | 00047740:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00047 | 00047750:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 00047 | 00047760:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00047 | 00047770:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00047 | 00047780:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | ||
| 00047 | 00047790:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 00047 | 000477a0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | ||
| 00047 | 000477b0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | ||
| 00047 | 000477c0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | ||
| 00047 | 000477d0:·6d65·3a20·456e·7375·7265·2072·6561·7220··me:·Ensure·rear· | ||
| 00047 | 000477e0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | ||
| 00047 | 000477f0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | ||
| 00047 | 00047800:·3a20·7265·6172·0a20·2020·2073·7461·7465··:·rear.····state | ||
| 00047 | 00047810:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | ||
| 00047 | 00047820:·3a20·6e6f·7420·2820·2820·2820·616e·7369··:·not·(·(·(·ansi | ||
| 00047 | 00047830:·626c·655f·6172·6368·6974·6563·7475·7265··ble_architecture | ||
| 000474 | 00047840:·203d·3d20·2261·6172·6368·3634·2220·616e···==·"aarch64"·an | ||
| 00047850:·6420·616e·7369·626c·655f·6469·7374·7269··d·ansible_distri | |||
| 00047860:·6275·7469·6f6e·203d·3d20·274f·7261·636c··bution·==·'Oracl | |||
| 00047870:·654c·696e·7578·270a·2020·2020·616e·6420··eLinux'.····and· | |||
| 00047 | 00047880:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | ||
| 00047500:·7469·6f6e·203d·3d20·274f·7261·636c·654c··tion·==·'OracleL | |||
| 00047510:·696e·7578·270a·2020·2020·616e·6420·616e··inux'.····and·an | |||
| 00047520:·7369·626c·655f·6469·7374·7269·6275·7469··sible_distributi | |||
| 00047 | 00047890:·7469·6f6e·5f76·6572·7369·6f6e·2069·7320··tion_version·is· | ||
| 00047540:·7273·696f·6e28·2739·2e30·272c·2027·2667··rsion('9.0',·'&g | |||
| 00047550:·743b·3d27·2920·2920·6f72·2028·2061·6e73··t;=')·)·or·(·ans | |||
| 00047560:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | |||
| 00047570:·650a·2020·2020·3d3d·2022·6161·7263·6836··e.····==·"aarch6 | |||
| 00047580:·3422·2061·6e64·2061·6e73·6962·6c65·5f64··4"·and·ansible_d | |||
| 00047590:·6973·7472·6962·7574·696f·6e20·3d3d·2027··istribution·==·' | |||
| 000475a0:·5265·6448·6174·2720·616e·6420·616e·7369··RedHat'·and·ansi | |||
| 000475b0:·626c·655f·6469·7374·7269·6275·7469·6f6e··ble_distribution | |||
| 000475c0:·5f76·6572·7369·6f6e·0a20·2020·2069·7320··_version.····is· | |||
| 00047 | 000478a0:·7665·7273·696f·6e28·2739·2e30·272c·2027··version('9.0',·' | ||
| 00047 | 000478b0:·2667·743b·3d27·2920·2920·6f72·2028·2061··>=')·)·or·(·a | ||
| 000478c0:·6e73·6962·6c65·5f61·7263·6869·7465·6374··nsible_architect | |||
| Max diff block lines reached; 745926/783516 bytes (95.20%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:7 | 45 | ····*·cpe:/o:oracle:linux:7 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 839, 14 lines modified | Offset 839, 26 lines modified | ||
| 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 839 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 840 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 841 | The·rear·package·can·be·installed·with·the·following·command: | 841 | The·rear·package·can·be·installed·with·the·following·command: |
| 842 | $·sudo·yum·install·rear | 842 | $·sudo·yum·install·rear |
| 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 843 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 844 | Severity: ·medium | 844 | Severity: ·medium |
| 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 845 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 847 | [[packages]] | ||
| 848 | name·=·"rear" | ||
| 849 | version·=·"*" | ||
| 850 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 851 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 852 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 853 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 854 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 855 | package·--add=rear | ||
| 846 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 856 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 847 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 857 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 848 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 858 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 849 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 859 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 850 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 860 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 851 | -·name:·Ensure·rear·is·installed | 861 | -·name:·Ensure·rear·is·installed |
| 852 | ··package: | 862 | ··package: |
| Offset 860, 31 lines modified | Offset 872, 14 lines modified | ||
| 860 | ··tags: | 872 | ··tags: |
| 861 | ··-·enable_strategy | 873 | ··-·enable_strategy |
| 862 | ··-·low_complexity | 874 | ··-·low_complexity |
| 863 | ··-·low_disruption | 875 | ··-·low_disruption |
| 864 | ··-·medium_severity | 876 | ··-·medium_severity |
| 865 | ··-·no_reboot_needed | 877 | ··-·no_reboot_needed |
| 866 | ··-·package_rear_installed | 878 | ··-·package_rear_installed |
| 867 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 868 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 869 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 870 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 871 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 872 | include·install_rear | ||
| 873 | class·install_rear·{ | ||
| 874 | ··package·{·'rear': | ||
| 875 | ····ensure·=>·'installed', | ||
| 876 | ··} | ||
| 877 | } | ||
| 878 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 879 | [[packages]] | ||
| 880 | name·=·"rear" | ||
| 881 | version·=·"*" | ||
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 883 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 880 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 884 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 881 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 885 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 882 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 886 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 883 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 887 | #·Remediation·is·applicable·only·in·certain·platforms | 884 | #·Remediation·is·applicable·only·in·certain·platforms |
| 888 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 885 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 892, 21 lines modified | Offset 887, 26 lines modified | ||
| 892 | if·!·rpm·-q·--quiet·"rear"·;·then | 887 | if·!·rpm·-q·--quiet·"rear"·;·then |
| 893 | ····yum·install·-y·"rear" | 888 | ····yum·install·-y·"rear" |
| 894 | fi | 889 | fi |
| 895 | else | 890 | else |
| 896 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 891 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 897 | fi | 892 | fi |
| 898 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 899 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 900 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 901 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 902 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 898 | include·install_rear | ||
| 903 | 899 | class·install_rear·{ | |
| 900 | ··package·{·'rear': | ||
| 901 | ····ensure·=>·'installed', | ||
| 902 | ··} | ||
| 903 | } | ||
| 904 | Group ·Updating·Software· Group·contains·5·rules | 904 | Group ·Updating·Software· Group·contains·5·rules |
| 905 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 905 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 906 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 906 | Oracle·Linux·7·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 907 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 907 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·g\x8gp\x8pg\x8gc\x8ch\x8he\x8ec\x8ck\x8k·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·I\x8In\x8n·M\x8Ma\x8ai\x8in\x8n·y\x8yu\x8um\x8m·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8ra\x8at\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 908 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: | 908 | The·gpgcheck·option·controls·whether·RPM·packages'·signatures·are·always·checked·prior·to·installation.·To·configure·yum·to·check·package·signatures·before·installing·them,·ensure·the·following·line·appears·in·/etc/yum.conf·in·the·[main]·section: |
| Offset 1362, 38 lines modified | Offset 1362, 14 lines modified | ||
| 1362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1362 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1363 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1363 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1364 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1365 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1365 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1366 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 | 1366 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 |
| 1367 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1367 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1368 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule | 1368 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule |
| 1369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1370 | --- | ||
| 1371 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1372 | kind:·MachineConfig | ||
| 1373 | spec: | ||
| 1374 | ··config: | ||
| 1375 | ····ignition: | ||
| 1376 | ······version:·3.1.0 | ||
| 1377 | ····storage: | ||
| 1378 | ······files: | ||
| 1379 | ······-·contents: | ||
| 1380 | ··········source: | ||
| 1381 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1382 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1383 | ········mode:·0644 | ||
| 1384 | ········path:·/etc/pam.d/password-auth | ||
| 1385 | ········overwrite:·true | ||
| 1386 | ······-·contents: | ||
| Max diff block lines reached; 82283/97558 bytes (84.34%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 20365, 320 lines modified | Offset 20365, 320 lines modified | ||
| 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | 0004f8c0:·7267·6574·3d22·2369·646d·3133·3430·3622··rget="#idm13406" | ||
| 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0004f8d0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0004f8e0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0004f8f0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0004f900:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0004f910:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0004f920:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0004f930:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0004f940:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0004f950:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004f960:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004f970:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004f980:·2269·646d·3133·3430·3622·3e3c·7072·653e··"idm13406"><pre> | |||
| 0004f990:·3c63·6f64·653e·0a5b·6375·7374·6f6d·697a··<code>.[customiz | |||
| 0004f9a0:·6174·696f·6e73·2e73·6572·7669·6365·735d··ations.services] | |||
| 0004f9b0:·0a6d·6173·6b65·6420·3d20·5b22·6465·6275··.masked·=·["debu | |||
| 0004f9c0:·672d·7368·656c·6c22·5d0a·3c2f·636f·6465··g-shell"].</code | |||
| 0004f9d0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004f9e0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004f9f0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004fa00:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004fa10:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004fa20:·3133·3430·3722·2074·6162·696e·6465·783d··13407"·tabindex= | |||
| 0004fa30:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004fa40:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004fa50:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004fa60:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004fa70:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004fa80:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0004fa90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0004faa0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0004fab0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0004fac0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0004fad0:·3133·3430·3722·3e3c·7461·626c·6520·636c··13407"><table·cl | |||
| 0004fae0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0004faf0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0004fb00:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0004fb10:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0004fb20:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0004fb30:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004fb40:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004fb50:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0004fb60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0004fb70:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0004fb80:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0004fb90:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0004fba0:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 0004fbb0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0004fbc0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0004f930:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0004f940:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004f950:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0004f960:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0004f970:·6522·2069·643d·2269·646d·3133·3430·3622··e"·id="idm13406" | |||
| 0004f980:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0004f990:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0004f9a0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0004f9b0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0004f9c0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0004f9d0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0004f9e0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0004f9f0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0004fa00:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0004fa10:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004fa20:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0004fa30:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0004fa40:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0004fa50:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 0004fa60:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0004fa70:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0004fa80:·3a20·4469·7361·626c·6520·6465·6275·672d··:·Disable·debug- | |||
| 0004fa90:·7368·656c·6c20·5379·7374·656d·4420·5365··shell·SystemD·Se | |||
| 0004faa0:·7276·6963·6520·2d20·436f·6c6c·6563·7420··rvice·-·Collect· | |||
| 0004fab0:·7379·7374·656d·6420·5365·7276·6963·6573··systemd·Services | |||
| 0004fac0:·2050·7265·7365·6e74·2069·6e0a·2020·2020···Present·in.···· | |||
| 0004fad0:·7468·6520·5379·7374·656d·0a20·2061·6e73··the·System.··ans | |||
| 0004fae0:·6962·6c65·2e62·7569·6c74·696e·2e63·6f6d··ible.builtin.com | |||
| 0004faf0:·6d61·6e64·3a20·7379·7374·656d·6374·6c20··mand:·systemctl· | |||
| 0004fb00:·2d71·206c·6973·742d·756e·6974·2d66·696c··-q·list-unit-fil | |||
| 0004fb10:·6573·202d·2d74·7970·6520·7365·7276·6963··es·--type·servic | |||
| 0004fb20:·650a·2020·7265·6769·7374·6572·3a20·7365··e.··register:·se | |||
| 0004fb30:·7276·6963·655f·6578·6973·7473·0a20·2063··rvice_exists.··c | |||
| 0004fb40:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0004fb50:·7365·0a20·2066·6169·6c65·645f·7768·656e··se.··failed_when | |||
| 0004fb60:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 0004fb70:·2e72·6320·6e6f·7420·696e·205b·302c·2031··.rc·not·in·[0,·1 | |||
| 0004fb80:·5d0a·2020·6368·6563·6b5f·6d6f·6465·3a20··].··check_mode:· | |||
| 0004fb90:·6661·6c73·650a·2020·7768·656e·3a20·616e··false.··when:·an | |||
| 0004fba0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0004fbb0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0004fbc0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0004fbd0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0004fbe0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0004fbf0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0004fc00:·4e49·5354·2d38·3030·2d31·3731·2d33·2e34··NIST-800-171-3.4 | |||
| 0004fc10:·2e35·0a20·202d·204e·4953·542d·3830·302d··.5.··-·NIST-800- | |||
| 0004fc20:·3533·2d43·4d2d·360a·2020·2d20·6469·7361··53-CM-6.··-·disa | |||
| 0004fc30:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0004fc40:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0004fc50:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0004fc60:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0004fc70:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0004fc80:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0004fc90:·7365·7276·6963·655f·6465·6275·672d·7368··service_debug-sh | |||
| 0004fca0:·656c·6c5f·6469·7361·626c·6564·0a0a·2d20··ell_disabled..-· | |||
| 0004f | 0004fbd0:·2d20·6e61·6d65·3a20·4469·7361·626c·6520··-·name:·Disable· | ||
| 0004f | 0004fbe0:·6465·6275·672d·7368·656c·6c20·5379·7374··debug-shell·Syst | ||
| 0004f | 0004fbf0:·656d·4420·5365·7276·6963·6520·2d20·436f··emD·Service·-·Co | ||
| 0004fce0:·7265·2064·6562·7567·2d73·6865·6c6c·2e73··re·debug-shell.s | |||
| 0004fc | 0004fc00:·6c6c·6563·7420·7379·7374·656d·6420·5365··llect·systemd·Se | ||
| 0004fc10:·7276·6963·6573·2050·7265·7365·6e74·2069··rvices·Present·i | |||
| Max diff block lines reached; 866294/910232 bytes (95.17%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:7 | 50 | ····*·cpe:/o:oracle:linux:7 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1202, 14 lines modified | Offset 1202, 18 lines modified | ||
| 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1202 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1203 | ············_\x8c_\x8u_\x8i····3.4.5 | 1203 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1204 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1205 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1206 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1207 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1208 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1210 | [customizations.services] | ||
| 1211 | masked·=·["debug-shell"] | ||
| 1209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1212 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1213 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1214 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1215 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1216 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1214 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1217 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1215 | ····the·System | 1218 | ····the·System |
| Offset 1279, 31 lines modified | Offset 1283, 14 lines modified | ||
| 1279 | ··-·NIST-800-53-CM-6 | 1283 | ··-·NIST-800-53-CM-6 |
| 1280 | ··-·disable_strategy | 1284 | ··-·disable_strategy |
| 1281 | ··-·low_complexity | 1285 | ··-·low_complexity |
| 1282 | ··-·low_disruption | 1286 | ··-·low_disruption |
| 1283 | ··-·medium_severity | 1287 | ··-·medium_severity |
| 1284 | ··-·no_reboot_needed | 1288 | ··-·no_reboot_needed |
| 1285 | ··-·service_debug-shell_disabled | 1289 | ··-·service_debug-shell_disabled |
| 1286 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1287 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1288 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1289 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1290 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1291 | include·disable_debug-shell | ||
| 1292 | class·disable_debug-shell·{ | ||
| 1293 | ··service·{'debug-shell': | ||
| 1294 | ····enable·=>·false, | ||
| 1295 | ····ensure·=>·'stopped', | ||
| 1296 | ··} | ||
| 1297 | } | ||
| 1298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1299 | [customizations.services] | ||
| 1300 | masked·=·["debug-shell"] | ||
| 1301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1290 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1302 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1291 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1303 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1292 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1304 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1293 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1305 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1294 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1306 | #·Remediation·is·applicable·only·in·certain·platforms | 1295 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1307 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1296 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1321, 14 lines modified | Offset 1308, 27 lines modified | ||
| 1321 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1308 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1322 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1309 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1323 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1310 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1324 | else | 1311 | else |
| 1325 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1312 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1326 | fi | 1313 | fi |
| 1314 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1315 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1316 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1317 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1318 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1319 | include·disable_debug-shell | ||
| 1320 | class·disable_debug-shell·{ | ||
| 1321 | ··service·{'debug-shell': | ||
| 1322 | ····enable·=>·false, | ||
| 1323 | ····ensure·=>·'stopped', | ||
| 1324 | ··} | ||
| 1325 | } | ||
| 1327 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1326 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1328 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. | 1327 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. |
| 1329 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: | 1328 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: |
| 1330 | CtrlAltDelBurstAction=none | 1329 | CtrlAltDelBurstAction=none |
| 1331 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. | 1330 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. |
| 1332 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. | 1331 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. |
| Offset 1718, 38 lines modified | Offset 1718, 14 lines modified | ||
| 1718 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1718 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1719 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1719 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1720 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1720 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1721 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1721 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1722 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 | 1722 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 |
| 1723 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1723 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1724 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule | 1724 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule |
| 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1726 | --- | ||
| 1727 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1728 | kind:·MachineConfig | ||
| 1729 | spec: | ||
| 1730 | ··config: | ||
| 1731 | ····ignition: | ||
| 1732 | ······version:·3.1.0 | ||
| 1733 | ····storage: | ||
| 1734 | ······files: | ||
| 1735 | ······-·contents: | ||
| 1736 | ··········source: | ||
| 1737 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1738 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1739 | ········mode:·0644 | ||
| 1740 | ········path:·/etc/pam.d/password-auth | ||
| 1741 | ········overwrite:·true | ||
| 1742 | ······-·contents: | ||
| 1743 | ··········source: | ||
| 1744 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1745 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1746 | ········mode:·0644 | ||
| 1747 | ········path:·/etc/pam.d/system-auth | ||
| 1748 | ········overwrite:·true | ||
| 1749 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1725 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 90732/104960 bytes (86.44%) of diff not shown. | |||
| Offset 14368, 15 lines modified | Offset 14368, 15 lines modified | ||
| 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000381f0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00038200:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038210:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038220:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038230:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038240:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038250:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038260:·206f·6620·3230·323 | 00038260:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038270:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038280:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038290:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 000382a0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000382b0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000382c0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000382d0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16570, 203 lines modified | Offset 16570, 203 lines modified | ||
| 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 00040b90:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | 00040ba0:·6964·6d35·3634·3122·2074·6162·696e·6465··idm5641"·tabinde | ||
| 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00040bb0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00040bc0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00040bd0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00040be0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 00040bf0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00040c00:·656d·6564·6961·7469·6f6e·204 | 00040c00:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 00040c10:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00040c20:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040c30:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040c40:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040c50:·646d·3536·3431·223e·3c74·6162·6c65·2063··dm5641"><table·c | |||
| 00040c60:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040c70:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040c80:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040c90:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040ca0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040cb0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040cc0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00040c | 00040c10:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 00040c20:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00040c30:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040c40:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040c50:·7073·6522·2069·643d·2269·646d·3536·3431··pse"·id="idm5641 | |||
| 00040c60:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 00040c70:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 00040c80:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 00040c90:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 00040ca0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00040cb0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00040cc0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00040cd0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00040ce0:·2d74·6172·6765·743d·2223·6964·6d35·3634··-target="#idm564 | |||
| 00040cf0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 00040d00:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00040d10:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00040d20:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00040d30:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00040d40:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00040d50:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 00040d60:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040d70:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040d80:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040d90:·6170·7365·2220·6964·3d22·6964·6d35·3634··apse"·id="idm564 | |||
| 00040da0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 00040db0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040dc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040dd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040de0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040df0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040 | 00040e00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 00040cf0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00040d00:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00040 | 00040e10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 00040e20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00040e30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00040 | 00040e40:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 00040e50:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00040e60:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040e70:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040e80:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040e90:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 00040ea0:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 00040d30:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00040d40:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00040d50:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 00040d60:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 00040d70:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 00040d80:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 00040d90:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00040da0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 00040db0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 00040dc0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 00040dd0:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 00040de0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 00040df0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 00040e00:·6773·3a0a·2020·2d20·434a·4953·2d35·2e31··gs:.··-·CJIS-5.1 | |||
| 00040e10:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 00040e20:·5449·472d·4f4c·3037·2d30·302d·3032·3030··TIG-OL07-00-0200 | |||
| 00040e30:·3239·0a20·202d·204e·4953·542d·3830·302d··29.··-·NIST-800- | |||
| 00040e40:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 00040e50:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 00040e60:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 00040e70:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 00040e80:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 00040e90:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00040ea0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00040eb0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 00040ec0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 00040ed0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 00040ee0:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 00040e | 00040eb0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 00040 | 00040ec0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 00040 | 00040ed0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 00040 | 00040ee0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 00040 | 00040ef0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00040f | 00040f00:·2223·6964·6d35·3634·3322·2074·6162·696e··"#idm5643"·tabin | ||
| 00040f | 00040f10:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00040f | 00040f20:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00040f | 00040f30:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00040f | 00040f40:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00040f | 00040f50:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00040f | 00040f60:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 00040f70:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 00040fb0:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 00040fc0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040fd0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040fe0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040ff0:·6964·3d22·6964·6d35·3634·3222·3e3c·7461··id="idm5642"><ta | |||
| 00041000:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| Max diff block lines reached; 1966575/1994367 bytes (98.61%) of diff not shown. | |||
| Offset 58, 15 lines modified | Offset 58, 15 lines modified | ||
| 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide | 59 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·National·Checklist·Program·Security·Guide |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ncp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:oracle:linux:7 | 62 | ····*·cpe:/o:oracle:linux:7 |
| 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 64 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 65 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 67 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 68 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 69 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 70 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 71 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 451, 14 lines modified | Offset 451, 26 lines modified | ||
| 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 451 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 452 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 453 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 454 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 455 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 456 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 457 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | [[packages]] | ||
| 460 | name·=·"aide" | ||
| 461 | version·=·"*" | ||
| 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 467 | package·--add=aide | ||
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 463 | -·name:·Ensure·aide·is·installed | 473 | -·name:·Ensure·aide·is·installed |
| 464 | ··package: | 474 | ··package: |
| Offset 473, 31 lines modified | Offset 485, 14 lines modified | ||
| 473 | ··-·PCI-DSSv4-11.5.2 | 485 | ··-·PCI-DSSv4-11.5.2 |
| 474 | ··-·enable_strategy | 486 | ··-·enable_strategy |
| 475 | ··-·low_complexity | 487 | ··-·low_complexity |
| 476 | ··-·low_disruption | 488 | ··-·low_disruption |
| 477 | ··-·medium_severity | 489 | ··-·medium_severity |
| 478 | ··-·no_reboot_needed | 490 | ··-·no_reboot_needed |
| 479 | ··-·package_aide_installed | 491 | ··-·package_aide_installed |
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 485 | include·install_aide | ||
| 486 | class·install_aide·{ | ||
| 487 | ··package·{·'aide': | ||
| 488 | ····ensure·=>·'installed', | ||
| 489 | ··} | ||
| 490 | } | ||
| 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 492 | [[packages]] | ||
| 493 | name·=·"aide" | ||
| 494 | version·=·"*" | ||
| 495 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 496 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 497 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 498 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 499 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 500 | #·Remediation·is·applicable·only·in·certain·platforms | 497 | #·Remediation·is·applicable·only·in·certain·platforms |
| 501 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 498 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 505, 21 lines modified | Offset 500, 26 lines modified | ||
| 505 | if·!·rpm·-q·--quiet·"aide"·;·then | 500 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 506 | ····yum·install·-y·"aide" | 501 | ····yum·install·-y·"aide" |
| 507 | fi | 502 | fi |
| 508 | else | 503 | else |
| 509 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 504 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 510 | fi | 505 | fi |
| 511 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 506 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 512 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 507 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 513 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 508 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 514 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 509 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 515 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 510 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 511 | include·install_aide | ||
| 516 | 512 | class·install_aide·{ | |
| 513 | ··package·{·'aide': | ||
| 514 | ····ensure·=>·'installed', | ||
| 515 | ··} | ||
| 516 | } | ||
| 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 517 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 518 | Run·the·following·command·to·generate·a·new·database: | 518 | Run·the·following·command·to·generate·a·new·database: |
| 519 | $·sudo·/usr/sbin/aide·--init | 519 | $·sudo·/usr/sbin/aide·--init |
| 520 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 520 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 521 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 521 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 522 | To·initiate·a·manual·check,·run·the·following·command: | 522 | To·initiate·a·manual·check,·run·the·following·command: |
| 523 | $·sudo·/usr/sbin/aide·--check | 523 | $·sudo·/usr/sbin/aide·--check |
| Offset 1200, 14 lines modified | Offset 1200, 26 lines modified | ||
| 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 1200 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1201 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1202 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1203 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1204 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1205 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 1206 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1208 | [[packages]] | ||
| 1209 | name·=·"dracut-fips" | ||
| 1210 | version·=·"*" | ||
| 1211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1216 | package·--add=dracut-fips | ||
| 1207 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1217 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1208 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1218 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1209 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1219 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1210 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1220 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1211 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1221 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1212 | -·name:·Ensure·dracut-fips·is·installed | 1222 | -·name:·Ensure·dracut-fips·is·installed |
| Max diff block lines reached; 172345/178514 bytes (96.54%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15048, 232 lines modified | Offset 15048, 232 lines modified | ||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | 0003ac80:·3d22·2369·646d·3631·3732·2220·7461·6269··="#idm6172"·tabi | ||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003acf0:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003ad00:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003ad10:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003ad20:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003ad30:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003ad40:·3137·3222·3e3c·7072·653e·3c63·6f64·653e··172"><pre><code> | |||
| 0003ad50:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003ad60:·6d65·203d·2022·6472·6163·7574·2d66·6970··me·=·"dracut-fip | |||
| 0003ad70:·7322·0a76·6572·7369·6f6e·203d·2022·2a22··s".version·=·"*" | |||
| 0003ad80:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003ad90:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003ada0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003adb0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003adc0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003add0:·743d·2223·6964·6d36·3137·3322·2074·6162··t="#idm6173"·tab | |||
| 0003ade0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003adf0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003ae00:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003ae10:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003ae20:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003ae30:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003ae40:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003ae50:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003ae60:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003ae70:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ae80:·6964·3d22·6964·6d36·3137·3322·3e3c·7461··id="idm6173"><ta | |||
| 0003ae90:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003aea0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003aeb0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003aec0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aed0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003aee0:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003aef0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af00:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003af10:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003af20:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003af30:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003af40:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003af50:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003af60:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003af70:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003af80:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003af90:·6164·643d·6472·6163·7574·2d66·6970·730a··add=dracut-fips. | |||
| 0003afa0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003afb0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003afc0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003afd0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003afe0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003aff0:·3d22·2369·646d·3631·3734·2220·7461·6269··="#idm6174"·tabi | |||
| 0003b000:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b010:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b020:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b030:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b040:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003 | 0003b050:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003 | 0003b060:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 0003 | 0003b070:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003ad10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ad20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad30:·3d22·6964·6d36·3137·3222·3e3c·7461·626c··="idm6172"><tabl | |||
| 0003ad40:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ad50:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003ad60:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ad70:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ad80:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ad90:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ada0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003adb0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003adc0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003add0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ade0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003adf0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ae00:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae10:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003ae20:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003ae30:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003ae40:·6520·6472·6163·7574·2d66·6970·7320·6973··e·dracut-fips·is | |||
| 0003ae50:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003ae60:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003ae70:·6472·6163·7574·2d66·6970·730a·2020·2020··dracut-fips.···· | |||
| 0003ae80:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003ae90:·2077·6865·6e3a·0a20·202d·2028·2061·6e73···when:.··-·(·ans | |||
| 0003aea0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003aeb0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003aec0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003aed0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003aee0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003aef0:·225d·0a20·2020·2061·6e64·206e·6f74·2028··"].····and·not·( | |||
| 0003af00:·206c·6f6f·6b75·7028·2265·6e76·222c·2022···lookup("env",·" | |||
| 0003af10:·636f·6e74·6169·6e65·7222·2920·3d3d·2022··container")·==·" | |||
| 0003af20:·6277·7261·702d·6f73·6275·696c·6422·2029··bwrap-osbuild"·) | |||
| 0003af30:·2029·0a20·202d·2061·6e73·6962·6c65·5f76···).··-·ansible_v | |||
| 0003af40:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003af50:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003af60:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003af70:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003af80:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003af90:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | |||
| 0003afa0:·3130·2e31·2e32·0a20·202d·204e·4953·542d··10.1.2.··-·NIST- | |||
| 0003afb0:·3830·302d·3137·312d·332e·3133·2e31·310a··800-171-3.13.11. | |||
| 0003afc0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 0003afd0:·2d33·2e31·332e·380a·2020·2d20·4e49·5354··-3.13.8.··-·NIST | |||
| 0003afe0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| Max diff block lines reached; 1205977/1237771 bytes (97.43%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:7 | 47 | ····*·cpe:/o:oracle:linux:7 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 92, 14 lines modified | Offset 92, 26 lines modified | ||
| 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 | 92 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.6.6 |
| 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 93 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.13,·SR·2.6,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 94 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 95 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 96 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 97 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 | 98 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000396-GPOS-00176,·SRG-OS-000478-GPOS-00223 |
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 100 | [[packages]] | ||
| 101 | name·=·"dracut-fips" | ||
| 102 | version·=·"*" | ||
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | package·--add=dracut-fips | ||
| 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 104 | -·name:·Ensure·dracut-fips·is·installed | 114 | -·name:·Ensure·dracut-fips·is·installed |
| 105 | ··package: | 115 | ··package: |
| Offset 121, 31 lines modified | Offset 133, 14 lines modified | ||
| 121 | ··-·NIST-800-53-SC-13 | 133 | ··-·NIST-800-53-SC-13 |
| 122 | ··-·enable_strategy | 134 | ··-·enable_strategy |
| 123 | ··-·low_complexity | 135 | ··-·low_complexity |
| 124 | ··-·low_disruption | 136 | ··-·low_disruption |
| 125 | ··-·medium_severity | 137 | ··-·medium_severity |
| 126 | ··-·no_reboot_needed | 138 | ··-·no_reboot_needed |
| 127 | ··-·package_dracut-fips_installed | 139 | ··-·package_dracut-fips_installed |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | include·install_dracut-fips | ||
| 134 | class·install_dracut-fips·{ | ||
| 135 | ··package·{·'dracut-fips': | ||
| 136 | ····ensure·=>·'installed', | ||
| 137 | ··} | ||
| 138 | } | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | [[packages]] | ||
| 141 | name·=·"dracut-fips" | ||
| 142 | version·=·"*" | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 148 | #·Remediation·is·applicable·only·in·certain·platforms | 145 | #·Remediation·is·applicable·only·in·certain·platforms |
| 149 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 146 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| Offset 153, 21 lines modified | Offset 148, 26 lines modified | ||
| 153 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then | 148 | if·!·rpm·-q·--quiet·"dracut-fips"·;·then |
| 154 | ····yum·install·-y·"dracut-fips" | 149 | ····yum·install·-y·"dracut-fips" |
| 155 | fi | 150 | fi |
| 156 | else | 151 | else |
| 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 152 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 158 | fi | 153 | fi |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | include·install_dracut-fips | ||
| 164 | 160 | class·install_dracut-fips·{ | |
| 161 | ··package·{·'dracut-fips': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·i\x8in\x8n·G\x8GR\x8RU\x8UB\x8B2\x82·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: | 166 | To·ensure·FIPS·mode·is·enabled,·install·package·dracut-fips,·and·rebuild·initramfs·by·running·the·following·commands: |
| 167 | $·sudo·yum·install·dracut-fips | 167 | $·sudo·yum·install·dracut-fips |
| 168 | dracut·-f | 168 | dracut·-f |
| 169 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: | 169 | After·the·dracut·command·has·been·run,·add·the·argument·fips=1·to·the·default·GRUB·2·command·line·for·the·Linux·operating·system·in·/etc/default/grub,·in·the·manner·below: |
| 170 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" | 170 | GRUB_CMDLINE_LINUX="crashkernel=auto·rd.lvm.lv=VolGroup/LogVol06·rd.lvm.lv=VolGroup/lv_swap·rhgb·quiet·rd.shell=0·fips=1" |
| 171 | Finally,·rebuild·the·grub.cfg·file·by·using·the | 171 | Finally,·rebuild·the·grub.cfg·file·by·using·the |
| Offset 195, 14 lines modified | Offset 195, 17 lines modified | ||
| 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 195 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 196 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 197 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 198 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 199 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 200 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 201 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 204 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 205 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 206 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 207 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 208 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·Gather·the·package·facts | 209 | -·name:·Gather·the·package·facts |
| 208 | ··package_facts: | 210 | ··package_facts: |
| Offset 686, 17 lines modified | Offset 689, 14 lines modified | ||
| 686 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 689 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 687 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 690 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 688 | fi | 691 | fi |
| 689 | else | 692 | else |
| 690 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 693 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 691 | fi | 694 | fi |
| Max diff block lines reached; 80930/87605 bytes (92.38%) of diff not shown. | |||
| Offset 14281, 15 lines modified | Offset 14281, 15 lines modified | ||
| 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037c80:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037c90:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037ca0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037cb0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037cc0:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037cd0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ce0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037cf0:·3230·323 | 00037cf0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037d00:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037d10:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037d20:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037d30:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037d40:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037d50:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037d60:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 16436, 202 lines modified | Offset 16436, 202 lines modified | ||
| 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | 00040330:·6574·3d22·2369·646d·3536·3431·2220·7461··et="#idm5641"·ta | ||
| 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 00040340:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 00040350:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00040360:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00040370:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00040380:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00040390:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 000403a0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 000403b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 000403c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 000403d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 000403e0:·6964·3d22·6964·6d35·3634·3122·3e3c·7461··id="idm5641"><ta | |||
| 000403f0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040400:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00040410:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00040420:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00040430:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00040440:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00040450:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00040 | 000403a0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 000403b0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 000403c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000403d0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000403e0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 000403f0:·6d35·3634·3122·3e3c·7072·653e·3c63·6f64··m5641"><pre><cod | |||
| 00040400:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 00040410:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 00040420:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 00040430:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 00040440:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 00040450:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 00040460:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 00040470:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 00040480:·646d·3536·3432·2220·7461·6269·6e64·6578··dm5642"·tabindex | |||
| 00040490:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 000404a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 000404b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 000404c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 000404d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 000404e0:·6d65·6469·6174·696f·6e20·416e·6163·6f6e··mediation·Anacon | |||
| 000404f0:·6461·2073·6e69·7070·6574·20e2·87b2·3c2f··da·snippet·...</ | |||
| 00040500:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00040510:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00040520:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00040530:·646d·3536·3432·223e·3c74·6162·6c65·2063··dm5642"><table·c | |||
| 00040540:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00040550:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00040560:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00040570:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00040580:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00040 | 00040590:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 00040480:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 00040 | 000405a0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 000405b0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00040 | 000405c0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 000405d0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 000405e0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 000405f0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00040600:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 000404b0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 000404c0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 000404d0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 000404e0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 000404f0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 00040500:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 00040510:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 00040520:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 00040530:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 00040540:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00040550:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 00040560:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 00040570:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 00040580:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 00040590:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 000405a0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 000405b0:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | |||
| 000405c0:·2d30·3230·3032·390a·2020·2d20·4e49·5354··-020029.··-·NIST | |||
| 000405d0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 000405e0:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 000405f0:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 00040600:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 00040610:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 00040620:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 00040630:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 00040640:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 00040650:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 00040660:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 00040670:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 00040680:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00040690:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000406a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000406b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000406c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000406d0:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 000406e0:·3432·2220·7461·6269·6e64·6578·3d22·3022··42"·tabindex="0" | |||
| 000406f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040700:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040710:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040720:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040730:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040740:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 00040750:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00040760:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040770:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040780:·7073·6522·2069·643d·2269·646d·3536·3432··pse"·id="idm5642 | |||
| 00040790:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 000407a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 000407b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 000407c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 000407d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 000407e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| Max diff block lines reached; 289392/317046 bytes (91.28%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·Draft·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 421, 14 lines modified | Offset 421, 26 lines modified | ||
| 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 421 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 422 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 423 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 424 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 425 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 426 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 427 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 429 | [[packages]] | ||
| 430 | name·=·"aide" | ||
| 431 | version·=·"*" | ||
| 432 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 433 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 434 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 435 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 436 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 437 | package·--add=aide | ||
| 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 438 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 439 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 440 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 441 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 442 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 433 | -·name:·Ensure·aide·is·installed | 443 | -·name:·Ensure·aide·is·installed |
| 434 | ··package: | 444 | ··package: |
| Offset 443, 31 lines modified | Offset 455, 14 lines modified | ||
| 443 | ··-·PCI-DSSv4-11.5.2 | 455 | ··-·PCI-DSSv4-11.5.2 |
| 444 | ··-·enable_strategy | 456 | ··-·enable_strategy |
| 445 | ··-·low_complexity | 457 | ··-·low_complexity |
| 446 | ··-·low_disruption | 458 | ··-·low_disruption |
| 447 | ··-·medium_severity | 459 | ··-·medium_severity |
| 448 | ··-·no_reboot_needed | 460 | ··-·no_reboot_needed |
| 449 | ··-·package_aide_installed | 461 | ··-·package_aide_installed |
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 451 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 452 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 453 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 454 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 455 | include·install_aide | ||
| 456 | class·install_aide·{ | ||
| 457 | ··package·{·'aide': | ||
| 458 | ····ensure·=>·'installed', | ||
| 459 | ··} | ||
| 460 | } | ||
| 461 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 462 | [[packages]] | ||
| 463 | name·=·"aide" | ||
| 464 | version·=·"*" | ||
| 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 470 | #·Remediation·is·applicable·only·in·certain·platforms | 467 | #·Remediation·is·applicable·only·in·certain·platforms |
| 471 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 468 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 475, 21 lines modified | Offset 470, 26 lines modified | ||
| 475 | if·!·rpm·-q·--quiet·"aide"·;·then | 470 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 476 | ····yum·install·-y·"aide" | 471 | ····yum·install·-y·"aide" |
| 477 | fi | 472 | fi |
| 478 | else | 473 | else |
| 479 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 474 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 480 | fi | 475 | fi |
| 481 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 482 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 483 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 484 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 485 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 481 | include·install_aide | ||
| 486 | 482 | class·install_aide·{ | |
| 483 | ··package·{·'aide': | ||
| 484 | ····ensure·=>·'installed', | ||
| 485 | ··} | ||
| 486 | } | ||
| 487 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 487 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 488 | Run·the·following·command·to·generate·a·new·database: | 488 | Run·the·following·command·to·generate·a·new·database: |
| 489 | $·sudo·/usr/sbin/aide·--init | 489 | $·sudo·/usr/sbin/aide·--init |
| 490 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 490 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 491 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 491 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 492 | To·initiate·a·manual·check,·run·the·following·command: | 492 | To·initiate·a·manual·check,·run·the·following·command: |
| 493 | $·sudo·/usr/sbin/aide·--check | 493 | $·sudo·/usr/sbin/aide·--check |
| Offset 7929, 14 lines modified | Offset 7929, 17 lines modified | ||
| 7929 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 7929 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.18.1.4,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 7930 | ············_\x8n_\x8i_\x8s_\x8t···········IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7930 | ············_\x8n_\x8i_\x8s_\x8t···········IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7931 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 | 7931 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-6,·PR.AC-7 |
| 7932 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.3 | 7932 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.3 |
| 7933 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000104-GPOS-00051,·SRG-OS-000106-GPOS-00053,·SRG-OS-000107-GPOS-00054,·SRG-OS-000108-GPOS-00055,·SRG-OS-000108-GPOS-00057,·SRG-OS-000108-GPOS-00058,·SRG-OS-000109-GPOS-00056,·SRG-OS-000376-GPOS-00161,·SRG-OS-000377-GPOS-00162 | 7933 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000104-GPOS-00051,·SRG-OS-000106-GPOS-00053,·SRG-OS-000107-GPOS-00054,·SRG-OS-000108-GPOS-00055,·SRG-OS-000108-GPOS-00057,·SRG-OS-000108-GPOS-00058,·SRG-OS-000109-GPOS-00056,·SRG-OS-000376-GPOS-00161,·SRG-OS-000377-GPOS-00162 |
| 7934 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010500 | 7934 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010500 |
| 7935 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221703r818811_rule | 7935 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221703r818811_rule |
| 7936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7937 | package·--add=pam_pkcs11·--add=esc | ||
| 7936 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 7938 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7937 | #·Remediation·is·applicable·only·in·certain·platforms | 7939 | #·Remediation·is·applicable·only·in·certain·platforms |
| 7938 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·!·grep·-q·s390x·/proc/sys/kernel/osrelease;·};·then | 7940 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·{·!·grep·-q·s390x·/proc/sys/kernel/osrelease;·};·then |
| 7939 | #·Install·required·packages | 7941 | #·Install·required·packages |
| 7940 | if·!·rpm·-q·--quiet·"esc"·;·then | 7942 | if·!·rpm·-q·--quiet·"esc"·;·then |
| 7941 | ····yum·install·-y·"esc" | 7943 | ····yum·install·-y·"esc" |
| Offset 8043, 17 lines modified | Offset 8046, 14 lines modified | ||
| 8043 | #·2)·Then·append·'ocsp_on'·value·setting·to·each·'cert_policy'·key·in·$PAM_PKCS11_CONF·configuration·line, | 8046 | #·2)·Then·append·'ocsp_on'·value·setting·to·each·'cert_policy'·key·in·$PAM_PKCS11_CONF·configuration·line, |
| 8044 | #·which·does·not·contain·it·yet | 8047 | #·which·does·not·contain·it·yet |
| 8045 | sed·-i·"/ocsp_on/!·s/^[$SP]*cert_policy[$SP]\+=[$SP]\+\(.*\);/\t\tcert_policy·=·\1,·ocsp_on;/"·"$PAM_PKCS11_CONF" | 8048 | sed·-i·"/ocsp_on/!·s/^[$SP]*cert_policy[$SP]\+=[$SP]\+\(.*\);/\t\tcert_policy·=·\1,·ocsp_on;/"·"$PAM_PKCS11_CONF" |
| 8046 | else | 8049 | else |
| 8047 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8050 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8048 | fi | 8051 | fi |
| Max diff block lines reached; 31915/38516 bytes (82.86%) of diff not shown. | |||
| Offset 14289, 16 lines modified | Offset 14289, 16 lines modified | ||
| 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037d00:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037d10:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d20:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d30:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d40:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d50:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d70:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d70:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d80:·303 | 00037d80:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d90:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037da0:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037db0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037dc0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037dd0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037de0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037df0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 14650, 177 lines modified | Offset 14650, 177 lines modified | ||
| 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | 00039390:·7461·7267·6574·3d22·2369·646d·3930·3333··target="#idm9033 | ||
| 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 000393a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 000393b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 000393c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 000393d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 000393e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000393f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039400:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039410:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039420:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039430:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039440:·7365·2220·6964·3d22·6964·6d39·3033·3322··se"·id="idm9033" | |||
| 00039450:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039460:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039470:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039480:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039490:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000394a0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000394b0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000394c0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000394d0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 000394e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 000394f0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039500:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039510:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039520:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039530:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039540:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039550:·2045·6e73·7572·6520·676c·6962·6320·6973···Ensure·glibc·is | |||
| 00039560:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00039570:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00039580:·676c·6962·630a·2020·2020·7374·6174·653a··glibc.····state: | |||
| 00039590:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 000395a0:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 000395b0:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 000395c0:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000395d0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000395e0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000395f0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039600:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039610:·676c·6962·635f·696e·7374·616c·6c65·640a··glibc_installed. | |||
| 00039620:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00039630:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00039640:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00039650:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00039660:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00039670:·3d22·2369·646d·3930·3334·2220·7461·6269··="#idm9034"·tabi | |||
| 00039680:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00039690:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000396a0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 000396b0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000396c0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000396d0:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 000396e0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 000396f0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00039700:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 00039710:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00039720:·2269·646d·3930·3334·223e·3c74·6162·6c65··"idm9034"><table | |||
| 00039730:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00039740:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00039750:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00039760:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00039770:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00039780:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039790:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 000397a0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000397b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000397c0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000397d0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 000397e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000397f0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00039800:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 00039810:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 00039820:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 00039830:·6c5f·676c·6962·630a·0a63·6c61·7373·2069··l_glibc..class·i | |||
| 00039840:·6e73·7461·6c6c·5f67·6c69·6263·207b·0a20··nstall_glibc·{.· | |||
| 00039850:·2070·6163·6b61·6765·207b·2027·676c·6962···package·{·'glib | |||
| 00039860:·6327·3a0a·2020·2020·656e·7375·7265·203d··c':.····ensure·= | |||
| 00039870:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 00039880:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 00039890:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 000398a0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 000398b0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 000398c0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 000398d0:·612d·7461·7267·6574·3d22·2369·646d·3930··a-target="#idm90 | |||
| 000398e0:·3335·2220·7461·6269·6e64·6578·3d22·3022··35"·tabindex="0" | |||
| 000398f0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039900:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039910:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039920:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00039930:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00039 | 00039400:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00039 | 00039410:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 00039420:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039430:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039440:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039450:·3d22·6964·6d39·3033·3322·3e3c·7072·653e··="idm9033"><pre> | |||
| 00039460:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00039470:·735d·5d0a·6e61·6d65·203d·2022·676c·6962··s]].name·=·"glib | |||
| 00039480:·6322·0a76·6572·7369·6f6e·203d·2022·2a22··c".version·=·"*" | |||
| 00039490:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000394a0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000394b0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000394c0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000394d0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 000394e0:·743d·2223·6964·6d39·3033·3422·2074·6162··t="#idm9034"·tab | |||
| 000394f0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00039500:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00039510:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00039520:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| Max diff block lines reached; 160772/185114 bytes (86.85%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Security·Profile·of·Oracle·Linux·7·for·SAP |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_sap |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:oracle:linux:7 | 43 | ····*·cpe:/o:oracle:linux:7 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8O_\x8b_\x8s_\x8o_\x8l_\x8e_\x8t_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| Offset 64, 14 lines modified | Offset 64, 26 lines modified | ||
| 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the | 64 | The·package·glibc·is·installed·on·Linux·by·default,·but·the·glibc·version·might·not·be·sufficient·for·SAP.·Please·refer·to·SAP·note·of·your·Linux·version·for·the |
| 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: | 65 | minimum·requirement·on·glibc.·The·glibc·package·can·be·installed·with·the·following·command: |
| 66 | $·sudo·yum·install·glibc | 66 | $·sudo·yum·install·glibc |
| 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux | 67 | Rationale:·The·glibc·package·contains·standard·C·and·math·libraries·used·by·multiple·programs·on·Linux.·The·glibc·shipped·with·first·release·of·each·major·Linux |
| 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. | 68 | ···········version·is·often·not·sufficient·for·SAP.·An·update·is·required·after·the·first·OS·installation. |
| 69 | Severity: ·medium | 69 | Severity: ·medium |
| 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed | 70 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_glibc_installed |
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 72 | [[packages]] | ||
| 73 | name·=·"glibc" | ||
| 74 | version·=·"*" | ||
| 75 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 76 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 77 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 78 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 79 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 80 | package·--add=glibc | ||
| 71 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 81 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 72 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 82 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 73 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 83 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 74 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 84 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 75 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 85 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 76 | -·name:·Ensure·glibc·is·installed | 86 | -·name:·Ensure·glibc·is·installed |
| 77 | ··package: | 87 | ··package: |
| Offset 80, 55 lines modified | Offset 92, 55 lines modified | ||
| 80 | ··tags: | 92 | ··tags: |
| 81 | ··-·enable_strategy | 93 | ··-·enable_strategy |
| 82 | ··-·low_complexity | 94 | ··-·low_complexity |
| 83 | ··-·low_disruption | 95 | ··-·low_disruption |
| 84 | ··-·medium_severity | 96 | ··-·medium_severity |
| 85 | ··-·no_reboot_needed | 97 | ··-·no_reboot_needed |
| 86 | ··-·package_glibc_installed | 98 | ··-·package_glibc_installed |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 92 | include·install_glibc | ||
| 93 | class·install_glibc·{ | ||
| 94 | ··package·{·'glibc': | ||
| 95 | ····ensure·=>·'installed', | ||
| 96 | ··} | ||
| 97 | } | ||
| 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 99 | [[packages]] | ||
| 100 | name·=·"glibc" | ||
| 101 | version·=·"*" | ||
| 102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 99 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 100 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 101 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 102 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 103 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 107 | if·!·rpm·-q·--quiet·"glibc"·;·then | 104 | if·!·rpm·-q·--quiet·"glibc"·;·then |
| 108 | ····yum·install·-y·"glibc" | 105 | ····yum·install·-y·"glibc" |
| 109 | fi | 106 | fi |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | include·install_glibc | ||
| 115 | 113 | class·install_glibc·{ | |
| 114 | ··package·{·'glibc': | ||
| 115 | ····ensure·=>·'installed', | ||
| 116 | ··} | ||
| 117 | } | ||
| 116 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 118 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·u\x8uu\x8ui\x8id\x8dd\x8d·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 117 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated | 119 | The·package·uuidd·is·not·installed·on·normal·Linux·distribution·by·default.·Applications·require·this·package·to·avoid·database·inconsistences·caused·by·duplicated |
| 118 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information | 120 | UUIDs.·Especially·in·banking·services·with·SAP·where·massive·UUIDs·are·created·in·a·short·time·period,·it·is·important·to·install·the·package·uuidd.·More·information |
| 119 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: | 121 | can·be·found·in·SAP·note·1391070.·The·uuidd·package·can·be·installed·with·the·following·command: |
| 120 | $·sudo·yum·install·uuidd | 122 | $·sudo·yum·install·uuidd |
| 121 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. | 123 | Rationale:·The·uuidd·package·contains·a·userspace·daemon·(uuidd)·which·is·used·to·generate·unique·identifiers·even·at·very·high·rates·on·SMP·systems. |
| 122 | Severity: ·medium | 124 | Severity: ·medium |
| 123 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed | 125 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_uuidd_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"uuidd" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=uuidd | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure·uuidd·is·installed | 141 | -·name:·Ensure·uuidd·is·installed |
| 130 | ··package: | 142 | ··package: |
| Offset 137, 47 lines modified | Offset 149, 35 lines modified | ||
| 137 | ··tags: | 149 | ··tags: |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_uuidd_installed | 155 | ··-·package_uuidd_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| Max diff block lines reached; 15760/21916 bytes (71.91%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d30·3 | 00037d40:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 19025, 968 lines modified | Offset 19025, 968 lines modified | ||
| 0004a500:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004a500:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004a510:·2369·646d·3135·3839·3022·2074·6162·696e··#idm15890"·tabin | 0004a510:·2369·646d·3135·3839·3022·2074·6162·696e··#idm15890"·tabin | ||
| 0004a520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0004a520:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0004a530:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0004a540:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0004a550:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | Diff chunk too large, falling back to line-by-line diff (446 lines added, 446 lines removed) | |
| 0004a560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0004a560:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a570:·3e52·656d·6564·6961·7469·6f6e·204 | 0004a570:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0004a580:·6 | 0004a580:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0004a590:· | 0004a590:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004a5a0:· | 0004a5a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004a5b0:· | 0004a5b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004a5c0:· | 0004a5c0:·2269·646d·3135·3839·3022·3e3c·7461·626c··"idm15890"><tabl | ||
| 0004a5d0:· | 0004a5d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0004a5e0:· | 0004a5e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0004a5f0:·6 | 0004a5f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0004a600:·65 | 0004a600:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0004a610:· | 0004a610:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0004a620:· | 0004a620:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004a630:·3 | 0004a630:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0004a640:· | 0004a640:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0004a650:· | 0004a650:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | ||
| 0004a660:· | 0004a660:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 0004a670:· | 0004a670:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | ||
| 0004a680:· | 0004a680:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a690:· | 0004a690:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 0004a6a0:· | 0004a6a0:·7464·3e63·6f6e·6669·6775·7265·3c2f·7464··td>configure</td | ||
| 0004a6b0:· | 0004a6b0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0004a6c0:·3 | 0004a6c0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0004a6d0:·2 | 0004a6d0:·2050·7265·7665·6e74·204c·6f67·696e·2074···Prevent·Login·t | ||
| 0004a6e0:· | 0004a6e0:·6f20·4163·636f·756e·7473·2057·6974·6820··o·Accounts·With· | ||
| 0004a6f0:· | 0004a6f0:·456d·7074·7920·5061·7373·776f·7264·202d··Empty·Password·- | ||
| 0004a700:·2 | 0004a700:·2043·6865·636b·2069·6620·7379·7374·656d···Check·if·system | ||
| 0004a710:· | 0004a710:·2072·656c·6965·7320·6f6e·0a20·2020·2061···relies·on.····a | ||
| 0004a720:· | 0004a720:·7574·6873·656c·6563·740a·2020·616e·7369··uthselect.··ansi | ||
| 0004a730:· | 0004a730:·626c·652e·6275·696c·7469·6e2e·7374·6174··ble.builtin.stat | ||
| 0004a740:· | 0004a740:·3a0a·2020·2020·7061·7468·3a20·2f75·7372··:.····path:·/usr | ||
| 0004a750:·2 | 0004a750:·2f62·696e·2f61·7574·6873·656c·6563·740a··/bin/authselect. | ||
| 0004a760:· | 0004a760:·2020·7265·6769·7374·6572·3a20·7265·7375····register:·resu | ||
| 0004a770:· | 0004a770:·6c74·5f61·7574·6873·656c·6563·745f·7072··lt_authselect_pr | ||
| 0004a780:· | 0004a780:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | ||
| 0004a790:· | 0004a790:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | ||
| 0004a7a0:· | 0004a7a0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | ||
| 0004a7b0:·2 | 0004a7b0:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | ||
| 0004a7c0:· | 0004a7c0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | ||
| 0004a7d0:· | 0004a7d0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | ||
| 0004a7e0:· | 0004a7e0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | ||
| 0004a7f0:· | 0004a7f0:·434a·4953·2d35·2e35·2e32·0a20·202d·2044··CJIS-5.5.2.··-·D | ||
| 0004a800:· | 0004a800:·4953·412d·5354·4947·2d4f·4c30·372d·3030··ISA-STIG-OL07-00 | ||
| 0004a810:· | 0004a810:·2d30·3130·3239·300a·2020·2d20·4e49·5354··-010290.··-·NIST | ||
| 0004a820:·2 | 0004a820:·2d38·3030·2d31·3731·2d33·2e31·2e31·0a20··-800-171-3.1.1.· | ||
| 0004a830:· | 0004a830:·202d·204e·4953·542d·3830·302d·3137·312d···-·NIST-800-171- | ||
| 0004a840:·3 | 0004a840:·332e·312e·350a·2020·2d20·4e49·5354·2d38··3.1.5.··-·NIST-8 | ||
| 0004a850:· | 0004a850:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0004a860:·2 | 0004a860:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | ||
| 0004a870:· | 0004a870:·2d35·2831·2928·6129·0a20·202d·204e·4953··-5(1)(a).··-·NIS | ||
| 0004a880:· | 0004a880:·542d·3830·302d·3533·2d49·412d·3528·6329··T-800-53-IA-5(c) | ||
| 0004a890:· | 0004a890:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | ||
| 0004a8a0:· | 0004a8a0:·2d38·2e32·2e33·0a20·202d·2050·4349·2d44··-8.2.3.··-·PCI-D | ||
| 0004a8b0:· | 0004a8b0:·5353·7634·2d38·2e33·2e31·0a20·202d·2063··SSv4-8.3.1.··-·c | ||
| 0004a8c0:· | 0004a8c0:·6f6e·6669·6775·7265·5f73·7472·6174·6567··onfigure_strateg | ||
| 0004a8d0:· | 0004a8d0:·790a·2020·2d20·6869·6768·5f73·6576·6572··y.··-·high_sever | ||
| 0004a8e0:· | 0004a8e0:·6974·790a·2020·2d20·6c6f·775f·636f·6d70··ity.··-·low_comp | ||
| 0004a8f0:· | 0004a8f0:·6c65·7869·7479·0a20·202d·206d·6564·6975··lexity.··-·mediu | ||
| 0004a900:· | 0004a900:·6d5f·6469·7372·7570·7469·6f6e·0a20·202d··m_disruption.··- | ||
| 0004a910:· | 0004a910:·206e·6f5f·656d·7074·795f·7061·7373·776f···no_empty_passwo | ||
| 0004a920:· | 0004a920:·7264·730a·2020·2d20·6e6f·5f72·6562·6f6f··rds.··-·no_reboo | ||
| 0004a930:· | 0004a930:·745f·6e65·6564·6564·0a0a·2d20·6e61·6d65··t_needed..-·name | ||
| 0004a940:· | 0004a940:·3a20·5072·6576·656e·7420·4c6f·6769·6e20··:·Prevent·Login· | ||
| 0004a950:· | 0004a950:·746f·2041·6363·6f75·6e74·7320·5769·7468··to·Accounts·With | ||
| 0004a960:· | 0004a960:·2045·6d70·7479·2050·6173·7377·6f72·6420···Empty·Password· | ||
| 0004a970:· | 0004a970:·2d20·5265·6d65·6469·6174·6520·7573·696e··-·Remediate·usin | ||
| 0004a980:· | 0004a980:·6720·6175·7468·7365·6c65·6374·0a20·2062··g·authselect.··b | ||
| 0004a990:· | 0004a990:·6c6f·636b·3a0a·0a20·202d·206e·616d·653a··lock:..··-·name: | ||
| 0004a9a0:· | 0004a9a0:·2050·7265·7665·6e74·204c·6f67·696e·2074···Prevent·Login·t | ||
| 0004a9b0:· | 0004a9b0:·6f20·4163·636f·756e·7473·2057·6974·6820··o·Accounts·With· | ||
| 0004a9c0:· | 0004a9c0:·456d·7074·7920·5061·7373·776f·7264·202d··Empty·Password·- | ||
| 0004a9d0:· | 0004a9d0:·2043·6865·636b·2069·6e74·6567·7269·7479···Check·integrity | ||
| 0004a9e0:· | 0004a9e0:·206f·6620·6175·7468·7365·6c65·6374·0a20···of·authselect.· | ||
| 0004a9f0:· | 0004a9f0:·2020·2020·2063·7572·7265·6e74·2070·726f·······current·pro | ||
| 0004aa00:· | 0004aa00:·6669·6c65·0a20·2020·2061·6e73·6962·6c65··file.····ansible | ||
| 0004aa10:·2 | 0004aa10:·2e62·7569·6c74·696e·2e63·6f6d·6d61·6e64··.builtin.command | ||
| 0004aa20:· | 0004aa20:·3a0a·2020·2020·2020·636d·643a·2061·7574··:.······cmd:·aut | ||
| 0004aa30:· | 0004aa30:·6873·656c·6563·7420·6368·6563·6b0a·2020··hselect·check.·· | ||
| 0004aa40:· | 0004aa40:·2020·7265·6769·7374·6572·3a20·7265·7375····register:·resu | ||
| 0004aa50:·6 | 0004aa50:·6c74·5f61·7574·6873·656c·6563·745f·6368··lt_authselect_ch | ||
| 0004aa60:· | 0004aa60:·6563·6b5f·636d·640a·2020·2020·6368·616e··eck_cmd.····chan | ||
| 0004aa70:· | 0004aa70:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | ||
| 0004aa80:· | 0004aa80:·2020·2020·6661·696c·6564·5f77·6865·6e3a······failed_when: | ||
| 0004aa90:· | 0004aa90:·2066·616c·7365·0a0a·2020·2d20·6e61·6d65···false..··-·name | ||
| 0004aaa0:· | 0004aaa0:·3a20·5072·6576·656e·7420·4c6f·6769·6e20··:·Prevent·Login· | ||
| 0004aab0:· | 0004aab0:·746f·2041·6363·6f75·6e74·7320·5769·7468··to·Accounts·With | ||
| 0004aac0:· | 0004aac0:·2045·6d70·7479·2050·6173·7377·6f72·6420···Empty·Password· | ||
| 0004aad0:· | 0004aad0:·2d20·496e·666f·726d·6174·6976·6520·6d65··-·Informative·me | ||
| 0004aae0:· | 0004aae0:·7373·6167·6520·6261·7365·640a·2020·2020··ssage·based.···· | ||
| 0004aaf0:·2 | 0004aaf0:·2020·6f6e·2074·6865·2061·7574·6873·656c····on·the·authsel | ||
| 0004ab00:· | 0004ab00:·6563·7420·696e·7465·6772·6974·7920·6368··ect·integrity·ch | ||
| 0004ab10:· | 0004ab10:·6563·6b20·7265·7375·6c74·0a20·2020·2061··eck·result.····a | ||
| 0004ab20:· | 0004ab20:·6e73·6962·6c65·2e62·7569·6c74·696e·2e61··nsible.builtin.a | ||
| 0004ab30:·3 | 0004ab30:·7373·6572·743a·0a20·2020·2020·2074·6861··ssert:.······tha | ||
| 0004ab40:· | 0004ab40:·743a·0a20·2020·2020·202d·2072·6573·756c··t:.······-·resul | ||
| 0004ab50:· | 0004ab50:·745f·6175·7468·7365·6c65·6374·5f63·6865··t_authselect_che | ||
| 0004ab60:· | 0004ab60:·636b·5f63·6d64·2e72·6320·3d3d·2030·0a20··ck_cmd.rc·==·0.· | ||
| 0004ab70:· | 0004ab70:·2020·2020·2066·6169·6c5f·6d73·673a·0a20·······fail_msg:.· | ||
| 0004ab80:· | 0004ab80:·2020·2020·202d·2061·7574·6873·656c·6563·······-·authselec | ||
| 0004ab90:· | 0004ab90:·7420·696e·7465·6772·6974·7920·6368·6563··t·integrity·chec | ||
| 0004aba0:·6 | 0004aba0:·6b20·6661·696c·6564·2e20·5265·6d65·6469··k·failed.·Remedi | ||
| 0004abb0:· | 0004abb0:·6174·696f·6e20·6162·6f72·7465·6421·0a20··ation·aborted!.· | ||
| 0004abc0:· | 0004abc0:·2020·2020·202d·2054·6869·7320·7265·6d65·······-·This·reme | ||
| Max diff block lines reached; 430605/494001 bytes (87.17%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·7 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:7 | 42 | ····*·cpe:/o:oracle:linux:7 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 732, 38 lines modified | Offset 732, 14 lines modified | ||
| 732 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 732 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 733 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 733 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 734 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 734 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 735 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 735 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 736 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 | 736 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-010290 |
| 737 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 737 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 738 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule | 738 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221687r880678_rule |
| 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 740 | --- | ||
| 741 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 742 | kind:·MachineConfig | ||
| 743 | spec: | ||
| 744 | ··config: | ||
| 745 | ····ignition: | ||
| 746 | ······version:·3.1.0 | ||
| 747 | ····storage: | ||
| 748 | ······files: | ||
| 749 | ······-·contents: | ||
| 750 | ··········source: | ||
| 751 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 752 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 753 | ········mode:·0644 | ||
| 754 | ········path:·/etc/pam.d/password-auth | ||
| 755 | ········overwrite:·true | ||
| 756 | ······-·contents: | ||
| 757 | ··········source: | ||
| 758 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 759 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 760 | ········mode:·0644 | ||
| 761 | ········path:·/etc/pam.d/system-auth | ||
| 762 | ········overwrite:·true | ||
| 763 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 739 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 764 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 740 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 765 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 741 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 766 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 742 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 767 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 743 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 768 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 744 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 769 | ····authselect | 745 | ····authselect |
| Offset 924, 14 lines modified | Offset 900, 38 lines modified | ||
| 924 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 900 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 925 | fi | 901 | fi |
| 926 | fi | 902 | fi |
| 927 | else | 903 | else |
| 928 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 904 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 929 | fi | 905 | fi |
| 906 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 907 | --- | ||
| 908 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 909 | kind:·MachineConfig | ||
| 910 | spec: | ||
| 911 | ··config: | ||
| 912 | ····ignition: | ||
| 913 | ······version:·3.1.0 | ||
| 914 | ····storage: | ||
| 915 | ······files: | ||
| 916 | ······-·contents: | ||
| 917 | ··········source: | ||
| 918 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 919 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 920 | ········mode:·0644 | ||
| 921 | ········path:·/etc/pam.d/password-auth | ||
| 922 | ········overwrite:·true | ||
| 923 | ······-·contents: | ||
| 924 | ··········source: | ||
| 925 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 926 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 927 | ········mode:·0644 | ||
| 928 | ········path:·/etc/pam.d/system-auth | ||
| 929 | ········overwrite:·true | ||
| 930 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 930 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 931 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 931 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 932 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 932 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 933 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 933 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 934 | #·echo·$PATH | 934 | #·echo·$PATH |
| 935 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 935 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1027, 14 lines modified | Offset 1027, 26 lines modified | ||
| 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1027 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1028 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1029 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1030 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1031 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1032 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1033 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1035 | [[packages]] | ||
| 1036 | name·=·"rsyslog" | ||
| 1037 | version·=·"*" | ||
| 1038 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1039 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1040 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1041 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1042 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1043 | package·--add=rsyslog | ||
| 1034 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1035 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1036 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1037 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1038 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1039 | -·name:·Ensure·rsyslog·is·installed | 1049 | -·name:·Ensure·rsyslog·is·installed |
| 1040 | ··package: | 1050 | ··package: |
| Offset 1045, 31 lines modified | Offset 1057, 14 lines modified | ||
| 1045 | ··-·NIST-800-53-CM-6(a) | 1057 | ··-·NIST-800-53-CM-6(a) |
| 1046 | ··-·enable_strategy | 1058 | ··-·enable_strategy |
| 1047 | ··-·low_complexity | 1059 | ··-·low_complexity |
| 1048 | ··-·low_disruption | 1060 | ··-·low_disruption |
| 1049 | ··-·medium_severity | 1061 | ··-·medium_severity |
| 1050 | ··-·no_reboot_needed | 1062 | ··-·no_reboot_needed |
| Max diff block lines reached; 36458/58344 bytes (62.49%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037c50:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037c60:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037c70:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037c80:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037c90:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ca0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2028·6173·206f·6620·3230·323 | 00037cc0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037cd0:·323 | 00037cd0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037ce0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037cf0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037d00:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037d10:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037d20:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037d30:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037d40:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 17112, 203 lines modified | Offset 17112, 203 lines modified | ||
| 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00042d70:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | 00042d80:·6d35·3634·3122·2074·6162·696e·6465·783d··m5641"·tabindex= | ||
| 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00042d90:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00042da0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00042db0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00042dc0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00042dd0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 00042de0:·6564·6961·7469·6f6e·204 | 00042de0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00042df0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00042e00:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00042e10:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00042e20:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00042e30:·3536·3431·223e·3c74·6162·6c65·2063·6c61··5641"><table·cla | |||
| 00042e40:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00042e50:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00042e60:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00042e70:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00042e80:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00042e90:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00042 | 00042df0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 00042e00:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 00042e10:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00042e20:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00042e30:·6522·2069·643d·2269·646d·3536·3431·223e··e"·id="idm5641"> | |||
| 00042e40:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 00042e50:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00042e60:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 00042e70:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 00042e80:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00042e90:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00042ea0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00042eb0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00042ec0:·6172·6765·743d·2223·6964·6d35·3634·3222··arget="#idm5642" | |||
| 00042ed0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00042ee0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00042ef0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00042f00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00042f10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00042f20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00042f30:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 00042f40:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042f50:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042f60:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042f70:·7365·2220·6964·3d22·6964·6d35·3634·3222··se"·id="idm5642" | |||
| 00042f80:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00042f90:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042fa0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042fb0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042fc0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042 | 00042fd0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 00042 | 00042fe0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00042ed0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00042ee0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00042 | 00042ff0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00043000:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043010:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004 | 00043020:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 00043030:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00043040:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00043050:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00043060:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00043070:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00043080:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 00042f10:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00042f20:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00042f30:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 00042f40:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 00042f50:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00042f60:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00042f70:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00042f80:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00042f90:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00042fa0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00042fb0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00042fc0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00042fd0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00042fe0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 00042ff0:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 00043000:·472d·4f4c·3037·2d30·302d·3032·3030·3239··G-OL07-00-020029 | |||
| 00043010:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00043020:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00043030:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00043040:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00043050:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00043060:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00043070:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00043080:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00043090:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 000430a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 000430b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 000430c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 000430 | 00043090:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 000430 | 000430a0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 000430 | 000430b0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 00043 | 000430c0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 00043 | 000430d0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00043 | 000430e0:·6964·6d35·3634·3322·2074·6162·696e·6465··idm5643"·tabinde | ||
| 00043 | 000430f0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 000431 | 00043100:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 000431 | 00043110:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 000431 | 00043120:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000431 | 00043130:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 00043140:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 00043150:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 00043180:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 00043190:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 000431a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000431b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000431c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000431d0:·3d22·6964·6d35·3634·3222·3e3c·7461·626c··="idm5642"><tabl | |||
| Max diff block lines reached; 801633/829563 bytes (96.63%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·7 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:7 | 41 | ····*·cpe:/o:oracle:linux:7 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 570, 14 lines modified | Offset 570, 26 lines modified | ||
| 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 570 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 571 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 573 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 574 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 576 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 578 | [[packages]] | ||
| 579 | name·=·"aide" | ||
| 580 | version·=·"*" | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 586 | package·--add=aide | ||
| 577 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 587 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 578 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 588 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 579 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 589 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 580 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 590 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 581 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 591 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 582 | -·name:·Ensure·aide·is·installed | 592 | -·name:·Ensure·aide·is·installed |
| 583 | ··package: | 593 | ··package: |
| Offset 592, 31 lines modified | Offset 604, 14 lines modified | ||
| 592 | ··-·PCI-DSSv4-11.5.2 | 604 | ··-·PCI-DSSv4-11.5.2 |
| 593 | ··-·enable_strategy | 605 | ··-·enable_strategy |
| 594 | ··-·low_complexity | 606 | ··-·low_complexity |
| 595 | ··-·low_disruption | 607 | ··-·low_disruption |
| 596 | ··-·medium_severity | 608 | ··-·medium_severity |
| 597 | ··-·no_reboot_needed | 609 | ··-·no_reboot_needed |
| 598 | ··-·package_aide_installed | 610 | ··-·package_aide_installed |
| 599 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 600 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 601 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 602 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 603 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 604 | include·install_aide | ||
| 605 | class·install_aide·{ | ||
| 606 | ··package·{·'aide': | ||
| 607 | ····ensure·=>·'installed', | ||
| 608 | ··} | ||
| 609 | } | ||
| 610 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 611 | [[packages]] | ||
| 612 | name·=·"aide" | ||
| 613 | version·=·"*" | ||
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 619 | #·Remediation·is·applicable·only·in·certain·platforms | 616 | #·Remediation·is·applicable·only·in·certain·platforms |
| 620 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 617 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 624, 21 lines modified | Offset 619, 26 lines modified | ||
| 624 | if·!·rpm·-q·--quiet·"aide"·;·then | 619 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 625 | ····yum·install·-y·"aide" | 620 | ····yum·install·-y·"aide" |
| 626 | fi | 621 | fi |
| 627 | else | 622 | else |
| 628 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 623 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 629 | fi | 624 | fi |
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 630 | include·install_aide | ||
| 635 | 631 | class·install_aide·{ | |
| 632 | ··package·{·'aide': | ||
| 633 | ····ensure·=>·'installed', | ||
| 634 | ··} | ||
| 635 | } | ||
| 636 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 636 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 637 | Run·the·following·command·to·generate·a·new·database: | 637 | Run·the·following·command·to·generate·a·new·database: |
| 638 | $·sudo·/usr/sbin/aide·--init | 638 | $·sudo·/usr/sbin/aide·--init |
| 639 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 639 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 640 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 640 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 641 | To·initiate·a·manual·check,·run·the·following·command: | 641 | To·initiate·a·manual·check,·run·the·following·command: |
| 642 | $·sudo·/usr/sbin/aide·--check | 642 | $·sudo·/usr/sbin/aide·--check |
| Offset 1335, 14 lines modified | Offset 1335, 17 lines modified | ||
| 1335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1335 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1336 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1337 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1337 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1338 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1339 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 1339 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 1340 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 1340 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 1341 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 1341 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 1342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1343 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1342 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1344 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1343 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 1345 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 1344 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1346 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1345 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1347 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1346 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1348 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1347 | -·name:·Gather·the·package·facts | 1349 | -·name:·Gather·the·package·facts |
| 1348 | ··package_facts: | 1350 | ··package_facts: |
| Offset 1826, 17 lines modified | Offset 1829, 14 lines modified | ||
| 1826 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 1829 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 1827 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 1830 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 1828 | fi | 1831 | fi |
| 1829 | else | 1832 | else |
| 1830 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1833 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1831 | fi | 1834 | fi |
| Max diff block lines reached; 86968/93274 bytes (93.24%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dd0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037de0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037df0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e00:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e10:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e20:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e30:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e40:·3230·323 | 00037e40:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e50:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e60:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e70:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e80:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e90:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ea0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037eb0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 17130, 203 lines modified | Offset 17130, 203 lines modified | ||
| 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00042e90:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | 00042ea0:·3d22·2369·646d·3536·3431·2220·7461·6269··="#idm5641"·tabi | ||
| 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00042eb0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00042ec0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00042ed0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00042ee0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00042ef0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00042f00:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00042f00:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00042f10:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 00042f20:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00042f30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00042f40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00042f50:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 00042f60:·3634·3122·3e3c·7072·653e·3c63·6f64·653e··641"><pre><code> | |||
| 00042f70:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00042f80:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00042f90:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00042fa0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00042fb0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00042fc0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00042fd0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00042fe0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00042ff0:·3536·3432·2220·7461·6269·6e64·6578·3d22··5642"·tabindex=" | |||
| 00043000:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00043010:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00043020:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00043030:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00043040:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00043050:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 00043060:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00043070:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00043080:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00043090:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000430a0:·3536·3432·223e·3c74·6162·6c65·2063·6c61··5642"><table·cla | |||
| 000430b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000430c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000430d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000430e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000430f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00043100:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00043110:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00043120:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00043130:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00043140:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00043150:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00043160:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00043170:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00043180:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00043190:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 000431a0:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 000431b0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 000431c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000431d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 000431e0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 000431f0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00043200:·6574·3d22·2369·646d·3536·3433·2220·7461··et="#idm5643"·ta | |||
| 00043210:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00043220:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00043230:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00043240:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00043250:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00043260:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00042 | 00043270:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | ||
| 00042f20:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00042f30:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00042f40:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042f50:·3d22·6964·6d35·3634·3122·3e3c·7461·626c··="idm5641"><tabl | |||
| 00042f60:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042f70:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00042f80:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00042f90:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00042fa0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00042fb0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00042fc0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00042fd0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00042fe0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00042ff0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00043000:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00043010:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00043020:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00043030:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00043040:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00043050:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00043060:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00043070:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00043080:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00043090:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 000430a0:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000430b0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000430c0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000430d0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000430e0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000430f0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 00043100:·2074·6167·733a·0a20·202d·2043·4a49·532d···tags:.··-·CJIS- | |||
| 00043110:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 00043120:·412d·5354·4947·2d4f·4c30·372d·3030·2d30··A-STIG-OL07-00-0 | |||
| 00043130:·3230·3032·390a·2020·2d20·4e49·5354·2d38··20029.··-·NIST-8 | |||
| 00043140:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00043150:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 00043160:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 00043170:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 00043180:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00043190:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000431a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 000431b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000431c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000431d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 000431e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 000431f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00043200:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00043210:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| Max diff block lines reached; 784077/811869 bytes (96.58%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·7 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:7 | 46 | ····*·cpe:/o:oracle:linux:7 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 574, 14 lines modified | Offset 574, 26 lines modified | ||
| 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 574 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 575 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 576 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 | 577 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-020029 |
| 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 578 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 579 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule | 580 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251701r880693_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | [[packages]] | ||
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 590 | package·--add=aide | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 586 | -·name:·Ensure·aide·is·installed | 596 | -·name:·Ensure·aide·is·installed |
| 587 | ··package: | 597 | ··package: |
| Offset 596, 31 lines modified | Offset 608, 14 lines modified | ||
| 596 | ··-·PCI-DSSv4-11.5.2 | 608 | ··-·PCI-DSSv4-11.5.2 |
| 597 | ··-·enable_strategy | 609 | ··-·enable_strategy |
| 598 | ··-·low_complexity | 610 | ··-·low_complexity |
| 599 | ··-·low_disruption | 611 | ··-·low_disruption |
| 600 | ··-·medium_severity | 612 | ··-·medium_severity |
| 601 | ··-·no_reboot_needed | 613 | ··-·no_reboot_needed |
| 602 | ··-·package_aide_installed | 614 | ··-·package_aide_installed |
| 603 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 604 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 605 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 606 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 607 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 608 | include·install_aide | ||
| 609 | class·install_aide·{ | ||
| 610 | ··package·{·'aide': | ||
| 611 | ····ensure·=>·'installed', | ||
| 612 | ··} | ||
| 613 | } | ||
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 615 | [[packages]] | ||
| 616 | name·=·"aide" | ||
| 617 | version·=·"*" | ||
| 618 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 619 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 620 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 621 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 622 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 623 | #·Remediation·is·applicable·only·in·certain·platforms | 620 | #·Remediation·is·applicable·only·in·certain·platforms |
| 624 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 621 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 628, 21 lines modified | Offset 623, 26 lines modified | ||
| 628 | if·!·rpm·-q·--quiet·"aide"·;·then | 623 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 629 | ····yum·install·-y·"aide" | 624 | ····yum·install·-y·"aide" |
| 630 | fi | 625 | fi |
| 631 | else | 626 | else |
| 632 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 627 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 633 | fi | 628 | fi |
| 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 630 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 631 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 632 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 633 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 634 | include·install_aide | ||
| 639 | 635 | class·install_aide·{ | |
| 636 | ··package·{·'aide': | ||
| 637 | ····ensure·=>·'installed', | ||
| 638 | ··} | ||
| 639 | } | ||
| 640 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 640 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 641 | Run·the·following·command·to·generate·a·new·database: | 641 | Run·the·following·command·to·generate·a·new·database: |
| 642 | $·sudo·/usr/sbin/aide·--init | 642 | $·sudo·/usr/sbin/aide·--init |
| 643 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 643 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 644 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 644 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 645 | To·initiate·a·manual·check,·run·the·following·command: | 645 | To·initiate·a·manual·check,·run·the·following·command: |
| 646 | $·sudo·/usr/sbin/aide·--check | 646 | $·sudo·/usr/sbin/aide·--check |
| Offset 1339, 14 lines modified | Offset 1339, 17 lines modified | ||
| 1339 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 | 1339 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.6.2.1,·A.6.2.2 |
| 1340 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1340 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1341 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1341 | ············_\x8n_\x8i_\x8s_\x8t···········SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1342 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 | 1342 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.PT-4 |
| 1343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 | 1343 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000033-GPOS-00014,·SRG-OS-000185-GPOS-00079,·SRG-OS-000396-GPOS-00176,·SRG-OS-000405-GPOS-00184,·SRG-OS-000478-GPOS-00223 |
| 1344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 | 1344 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL07-00-021350 |
| 1345 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule | 1345 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-221758r877398_rule |
| 1346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1347 | package·--add=dracut-fips·--add=dracut-fips-aesni | ||
| 1346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1348 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high | 1349 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·high |
| 1348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1350 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1351 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1352 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1351 | -·name:·Gather·the·package·facts | 1353 | -·name:·Gather·the·package·facts |
| 1352 | ··package_facts: | 1354 | ··package_facts: |
| Offset 1830, 17 lines modified | Offset 1833, 14 lines modified | ||
| 1830 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader | 1833 | » #·Correct·the·form·of·kernel·command·line·for·each·installed·kernel·in·the·bootloader |
| 1831 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" | 1834 | » /sbin/grubby·--update-kernel=ALL·--args="fips=1·boot=UUID=${BOOT_UUID}" |
| 1832 | fi | 1835 | fi |
| 1833 | else | 1836 | else |
| 1834 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1837 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1835 | fi | 1838 | fi |
| Max diff block lines reached; 84208/90527 bytes (93.02%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dd0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037de0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037df0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e00:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e10:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e20:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e30:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e40:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e50:·2d30·3 | 00037e50:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e60:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e70:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e80:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e90:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037ea0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037eb0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ec0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15054, 202 lines modified | Offset 15054, 202 lines modified | ||
| 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | 0003acd0:·6172·6765·743d·2223·6964·6d35·3638·3422··arget="#idm5684" | ||
| 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003ace0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003acf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003ad00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ad10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ad20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ad30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ad40:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003ad50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ad60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ad70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ad80:·6522·2069·643d·2269·646d·3536·3834·223e··e"·id="idm5684"> | |||
| 0003ad90:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003ada0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003adb0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003adc0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003add0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003ade0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003adf0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a | 0003ad40:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003ad50:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ad60:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ad70:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ad80:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ad90:·2269·646d·3536·3834·223e·3c70·7265·3e3c··"idm5684"><pre>< | |||
| 0003ada0:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003adb0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003adc0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003add0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003ade0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003adf0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003ae00:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ae10:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ae20:·2223·6964·6d35·3638·3522·2074·6162·696e··"#idm5685"·tabin | |||
| 0003ae30:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ae40:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ae50:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ae60:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ae70:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ae80:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003ae90:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003aea0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003aeb0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003aec0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003aed0:·3d22·6964·6d35·3638·3522·3e3c·7461·626c··="idm5685"><tabl | |||
| 0003aee0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003aef0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003af00:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003af10:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003af20:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003a | 0003af30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003a | 0003af40:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003ae30:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003ae40:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003a | 0003af50:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003af60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003af70:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003a | 0003af80:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003af90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003afa0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003ae70:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003ae80:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003ae90:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003aea0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003aeb0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003aec0:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003aed0:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003aee0:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003aef0:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003af00:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003af10:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003af20:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003af30:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003af40:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003af50:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 0003af60:·2d30·302d·3031·3033·3539·0a20·202d·204e··-00-010359.··-·N | |||
| 0003af70:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003af80:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003af90:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003afa0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003afb0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003afc0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003afd0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003afe0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003aff0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b000:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b010:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b020:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b030:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b040:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b050:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b060:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b070:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b080:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003b090:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b0b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b0c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b0d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b0e0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b0f0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b110:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b120:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b130:·3638·3522·3e3c·7461·626c·6520·636c·6173··685"><table·clas | |||
| 0003b140:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b150:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b160:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b170:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b180:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| Max diff block lines reached; 1520496/1548288 bytes (98.20%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 115, 14 lines modified | Offset 115, 26 lines modified | ||
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 118 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 121 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 138 | ··package: |
| Offset 137, 31 lines modified | Offset 149, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 151 | ··-·low_complexity |
| 140 | ··-·low_disruption | 152 | ··-·low_disruption |
| 141 | ··-·medium_severity | 153 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 164, 26 lines modified | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | 164 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 170 | ····yum·install·-y·"aide" | 165 | ····yum·install·-y·"aide" |
| 171 | fi | 166 | fi |
| 172 | else | 167 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 169 | fi |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | ||
| 180 | 176 | class·install_aide·{ | |
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 185 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 186 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 534, 14 lines modified | Offset 534, 21 lines modified | ||
| 534 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 534 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 535 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 535 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 536 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 536 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 537 | ············/tmp·directory·is·wiped·during·reboot. | 537 | ············/tmp·directory·is·wiped·during·reboot. |
| 538 | Severity: ··low | 538 | Severity: ··low |
| 539 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 539 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 540 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 540 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 542 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 543 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 544 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 545 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 546 | services·--enabled=tmp.mount | ||
| 541 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 547 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 542 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 548 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 543 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 549 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 544 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 550 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 545 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 551 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 546 | -·name:·Enable·mount·tmp | 552 | -·name:·Enable·mount·tmp |
| 547 | ··ansible.builtin.systemd: | 553 | ··ansible.builtin.systemd: |
| Offset 569, 21 lines modified | Offset 576, 14 lines modified | ||
| 569 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 576 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 570 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 577 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 571 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 578 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 116014/121730 bytes (95.30%) of diff not shown. | |||
| Offset 14301, 16 lines modified | Offset 14301, 16 lines modified | ||
| 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037dc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037de0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037df0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e40:·2d30·3 | 00037e40:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ea0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037eb0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15059, 202 lines modified | Offset 15059, 202 lines modified | ||
| 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | 0003ad20:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | ||
| 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | 0003ad30:·3834·2220·7461·6269·6e64·6578·3d22·3022··84"·tabindex="0" | ||
| 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ad40:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ad50:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ad60:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ad70:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ad80:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ad90:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ada0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003adb0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003adc0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003add0:·6170·7365·2220·6964·3d22·6964·6d35·3638··apse"·id="idm568 | |||
| 0003ade0:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | |||
| 0003adf0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003ae00:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ae10:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ae20:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ae30:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ae40:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a | 0003ad90:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003ada0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003adb0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003adc0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003add0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003ade0:·6964·3d22·6964·6d35·3638·3422·3e3c·7072··id="idm5684"><pr | |||
| 0003adf0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003ae00:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ae10:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ae20:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ae30:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ae40:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ae50:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ae60:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ae70:·6574·3d22·2369·646d·3536·3835·2220·7461··et="#idm5685"·ta | |||
| 0003ae80:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ae90:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003aea0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003aeb0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003aec0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003aed0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003aee0:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0003aef0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003af00:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af10:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af20:·2069·643d·2269·646d·3536·3835·223e·3c74···id="idm5685"><t | |||
| 0003af30:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003af40:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af50:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af60:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af70:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003a | 0003af80:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003af90:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afa0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003afb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003afc0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003afd0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003a | 0003afe0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003aff0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003ae80:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003ae90:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003aea0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003aeb0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003aec0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003aed0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003aee0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003aef0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003af00:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003af10:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003af20:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003af30:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003af40:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003af50:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003af60:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003af70:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003af80:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003af90:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003afa0:·0a20·202d·2044·4953·412d·5354·4947·2d4f··.··-·DISA-STIG-O | |||
| 0003afb0:·4c30·382d·3030·2d30·3130·3335·390a·2020··L08-00-010359.·· | |||
| 0003afc0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003afd0:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003afe0:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003aff0:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b000:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b010:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b020:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b030:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b040:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b050:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b060:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b070:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b080:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b090:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b0a0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b0b0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b0c0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b0d0:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 0003b0e0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b0f0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b100:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b110:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b120:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b130:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b140:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b150:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b160:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b170:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b180:·646d·3536·3835·223e·3c74·6162·6c65·2063··dm5685"><table·c | |||
| 0003b190:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b1a0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b1b0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| Max diff block lines reached; 1599386/1627178 bytes (98.29%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 116, 14 lines modified | Offset 116, 26 lines modified | ||
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 122 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 139 | ··package: |
| Offset 138, 31 lines modified | Offset 150, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 152 | ··-·low_complexity |
| 141 | ··-·low_disruption | 153 | ··-·low_disruption |
| 142 | ··-·medium_severity | 154 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_aide | ||
| 151 | class·install_aide·{ | ||
| 152 | ··package·{·'aide': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 170, 21 lines modified | Offset 165, 26 lines modified | ||
| 170 | if·!·rpm·-q·--quiet·"aide"·;·then | 165 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 171 | ····yum·install·-y·"aide" | 166 | ····yum·install·-y·"aide" |
| 172 | fi | 167 | fi |
| 173 | else | 168 | else |
| 174 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 175 | fi | 170 | fi |
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | include·install_aide | ||
| 181 | 177 | class·install_aide·{ | |
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/sbin/aide·--init | 184 | $·sudo·/usr/sbin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 186 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 187 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 1059, 14 lines modified | Offset 1059, 21 lines modified | ||
| 1059 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 1059 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 1060 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 1060 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 1061 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 1061 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 1062 | ············/tmp·directory·is·wiped·during·reboot. | 1062 | ············/tmp·directory·is·wiped·during·reboot. |
| 1063 | Severity: ··low | 1063 | Severity: ··low |
| 1064 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 1064 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 1065 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 1065 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 1066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1071 | services·--enabled=tmp.mount | ||
| 1066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1072 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1073 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1074 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1075 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1076 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1071 | -·name:·Enable·mount·tmp | 1077 | -·name:·Enable·mount·tmp |
| 1072 | ··ansible.builtin.systemd: | 1078 | ··ansible.builtin.systemd: |
| Offset 1094, 21 lines modified | Offset 1101, 14 lines modified | ||
| 1094 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 1101 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 1095 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 1102 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 1096 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 1103 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 124987/130711 bytes (95.62%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037de0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037df0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037e00:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037e10:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037e20:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e30:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e40:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e50:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e60:·2d30·3 | 00037e60:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e70:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e80:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e90:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037ea0:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037eb0:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037ec0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ed0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15045, 202 lines modified | Offset 15045, 202 lines modified | ||
| 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | 0003ac40:·7461·7267·6574·3d22·2369·646d·3536·3834··target="#idm5684 | ||
| 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ac50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ac60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ac70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ac80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ac90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003aca0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003acb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003acc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003acd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ace0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ac | 0003acb0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003acc0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003acd0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ace0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003acf0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ad00:·3d22·6964·6d35·3638·3422·3e3c·7072·653e··="idm5684"><pre> | |||
| 0003ad10:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ad20:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ad30:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ad40:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ad | 0003ad50:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003ad10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003ad20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003ad30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003ad40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ad50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003ad60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003ad | 0003ad60:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003ad70:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ad80:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ad90:·3d22·2369·646d·3536·3835·2220·7461·6269··="#idm5685"·tabi | |||
| 0003ada0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003adb0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003adc0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003add0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003ade0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003adf0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003ae00:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003ae10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ae20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ae30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003ae40:·643d·2269·646d·3536·3835·223e·3c74·6162··d="idm5685"><tab | |||
| 0003ae50:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ae60:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ae70:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ae80:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ae90:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003a | 0003aea0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003aeb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003aec0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003aed0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003aee0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003aef0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003a | 0003af00:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003af10:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ada0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003adb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003adc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003add0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003ade0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003adf0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003ae00:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003ae10:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003ae20:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003ae30:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003ae40:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003ae50:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003ae60:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003ae70:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003ae80:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003ae90:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003aea0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003aeb0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003aec0:·202d·2044·4953·412d·5354·4947·2d4f·4c30···-·DISA-STIG-OL0 | |||
| 0003aed0:·382d·3030·2d30·3130·3335·390a·2020·2d20··8-00-010359.··-· | |||
| 0003aee0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003aef0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003af00:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003af10:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003af20:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003af30:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003af40:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003af50:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003af60:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003af70:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003af80:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003af90:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003afa0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003afb0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003afc0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003afd0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003afe0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003aff0:·646d·3536·3835·2220·7461·6269·6e64·6578··dm5685"·tabindex | |||
| 0003b000:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b010:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b020:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b030:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b040:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b050:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b060:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b070:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b080:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b090:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b0a0:·3536·3835·223e·3c74·6162·6c65·2063·6c61··5685"><table·cla | |||
| 0003b0b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b0c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b0d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b0e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b0f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| Max diff block lines reached; 1364640/1392432 bytes (98.00%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 116 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 119 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 135, 31 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 162, 26 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 162 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····yum·install·-y·"aide" | 163 | ····yum·install·-y·"aide" |
| 169 | fi | 164 | fi |
| 170 | else | 165 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 167 | fi |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 497, 14 lines modified | Offset 497, 21 lines modified | ||
| 497 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 497 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 498 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 498 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 499 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 499 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 500 | ············/tmp·directory·is·wiped·during·reboot. | 500 | ············/tmp·directory·is·wiped·during·reboot. |
| 501 | Severity: ··low | 501 | Severity: ··low |
| 502 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 502 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 503 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 503 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 509 | services·--enabled=tmp.mount | ||
| 504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 510 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 511 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 512 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 513 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 514 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 509 | -·name:·Enable·mount·tmp | 515 | -·name:·Enable·mount·tmp |
| 510 | ··ansible.builtin.systemd: | 516 | ··ansible.builtin.systemd: |
| Offset 532, 21 lines modified | Offset 539, 14 lines modified | ||
| 532 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 539 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 533 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 540 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 534 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 541 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 95527/101362 bytes (94.24%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037dd0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037de0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037df0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037e00:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037e10:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037e20:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2028·6173·206f·6620·3230·323 | 00037e40:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037e50:·323 | 00037e50:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037e60:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037e70:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037e80:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037e90:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037ea0:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037eb0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037ec0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 14718, 183 lines modified | Offset 14718, 183 lines modified | ||
| 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 000397d0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | 000397e0:·3035·3734·2220·7461·6269·6e64·6578·3d22··0574"·tabindex=" | ||
| 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000397f0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039800:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039810:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039820:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039830:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039840:·6469·6174·696f·6e20·4 | 00039840:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039850:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00039860:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039870:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039880:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039890:·2220·6964·3d22·6964·6d31·3035·3734·223e··"·id="idm10574"> | |||
| 000398a0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 000398b0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00039850:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039860:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039870:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039880:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039890:·3035·3734·223e·3c74·6162·6c65·2063·6c61··0574"><table·cla | |||
| 000398a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 000398b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 000398c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 000398d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 000398e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 000398f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039900:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039910:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00039920:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039930:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00039940:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00039950:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039960:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039970:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039980:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039990:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 000399a0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 000399b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000399c0:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 000399d0:·2d61·7574·6f6d·6174·6963·0a20·2020·2073··-automatic.····s | |||
| 000399e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 000399f0:·7461·6773·3a0a·2020·2d20·656e·6162·6c65··tags:.··-·enable | |||
| 00039a00:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039a10:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039a20:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039a30:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039a40:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039a50:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039a60:·6b61·6765·5f64·6e66·2d61·7574·6f6d·6174··kage_dnf-automat | |||
| 00039a70:·6963·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ic_installed.</c | |||
| 00039a80:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00039a90:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00039aa0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00039ab0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00039ac0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00039ad0:·6964·6d31·3035·3735·2220·7461·6269·6e64··idm10575"·tabind | |||
| 00039ae0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00039af0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00039b00:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00039b10:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00039b20:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00039b30:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 00039b40:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 00039b50:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00039b60:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00039b70:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00039b80:·646d·3130·3537·3522·3e3c·7461·626c·6520··dm10575"><table· | |||
| 00039b90:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00039ba0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00039bb0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00039bc0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00039bd0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00039be0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00039bf0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00039c00:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00039c10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039c20:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00039c30:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00039c40:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00039c50:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 00039c60:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00039c70:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00039c80:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 00039 | 000398c0:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | ||
| 00039ca0:·636c·6173·7320·696e·7374·616c·6c5f·646e··class·install_dn | |||
| 00039cb0:·662d·6175·746f·6d61·7469·6320·7b0a·2020··f-automatic·{.·· | |||
| 00039cc0:·7061·636b·6167·6520·7b20·2764·6e66·2d61··package·{·'dnf-a | |||
| 00039cd0:·7574·6f6d·6174·6963·273a·0a20·2020·2065··utomatic':.····e | |||
| 00039ce0:·6e73·7572·6520·3d26·6774·3b20·2769·6e73··nsure·=>·'ins | |||
| 00039 | 000398d0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | ||
| 000398e0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000398f0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039900:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039910:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039920:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039930:·2369·646d·3130·3537·3522·2074·6162·696e··#idm10575"·tabin | |||
| 00039940:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039950:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039960:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039970:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039980:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039990:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 000399a0:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 000399b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000399c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000399d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000399e0:·3d22·6964·6d31·3035·3735·223e·3c74·6162··="idm10575"><tab | |||
| 000399f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039a00:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039a10:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| Max diff block lines reached; 309346/334516 bytes (92.48%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 26 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package·--add=dnf-automatic | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | -·name:·Ensure·dnf-automatic·is·installed | 102 | -·name:·Ensure·dnf-automatic·is·installed |
| 93 | ··package: | 103 | ··package: |
| Offset 96, 47 lines modified | Offset 108, 35 lines modified | ||
| 96 | ··tags: | 108 | ··tags: |
| 97 | ··-·enable_strategy | 109 | ··-·enable_strategy |
| 98 | ··-·low_complexity | 110 | ··-·low_complexity |
| 99 | ··-·low_disruption | 111 | ··-·low_disruption |
| 100 | ··-·medium_severity | 112 | ··-·medium_severity |
| 101 | ··-·no_reboot_needed | 113 | ··-·no_reboot_needed |
| 102 | ··-·package_dnf-automatic_installed | 114 | ··-·package_dnf-automatic_installed |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | include·install_dnf-automatic | ||
| 109 | class·install_dnf-automatic·{ | ||
| 110 | ··package·{·'dnf-automatic': | ||
| 111 | ····ensure·=>·'installed', | ||
| 112 | ··} | ||
| 113 | } | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 120 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 124 | ····yum·install·-y·"dnf-automatic" | 121 | ····yum·install·-y·"dnf-automatic" |
| 125 | fi | 122 | fi |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_dnf-automatic | ||
| 129 | class·install_dnf-automatic·{ | ||
| 131 | package· | 130 | ··package·{·'dnf-automatic': |
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 137 | automatic.conf. |
| 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 11143, 14 lines modified | Offset 11143, 21 lines modified | ||
| 11143 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 11143 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 11144 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 11144 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 11145 | ···························A.9.1.2 | 11145 | ···························A.9.1.2 |
| 11146 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 11146 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 11147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 11147 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 11148 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 11148 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 11149 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 11149 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 11150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 11152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 11153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 11154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 11155 | package·--remove=dhcp | ||
| 11150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 11156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 11151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 11157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 11152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 11158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 11153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 11159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 11154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 11160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 11155 | -·name:·Ensure·dhcp·is·removed | 11161 | -·name:·Ensure·dhcp·is·removed |
| 11156 | ··package: | 11162 | ··package: |
| Offset 11163, 26 lines modified | Offset 11170, 14 lines modified | ||
| 11163 | ··-·PCI-DSSv4-2.2.4 | 11170 | ··-·PCI-DSSv4-2.2.4 |
| 11164 | ··-·disable_strategy | 11171 | ··-·disable_strategy |
| 11165 | ··-·low_complexity | 11172 | ··-·low_complexity |
| 11166 | ··-·low_disruption | 11173 | ··-·low_disruption |
| 11167 | ··-·medium_severity | 11174 | ··-·medium_severity |
| 11168 | ··-·no_reboot_needed | 11175 | ··-·no_reboot_needed |
| 11169 | ··-·package_dhcp_removed | 11176 | ··-·package_dhcp_removed |
| 11170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 11171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 36426/42441 bytes (85.83%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037d10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037d20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037d30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037d40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037d50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037d60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037d70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037d80:·3032·3 | 00037d80:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037d90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037da0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037db0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037dc0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037dd0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037de0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037df0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16386, 203 lines modified | Offset 16386, 203 lines modified | ||
| 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00040010:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 00040020:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00040030:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00040040:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00040050:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00040060:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00040070:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00040080:·3e52·656d·6564·6961·7469·6f6e·204 | 00040080:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00040090:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 000400a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000400b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000400c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000400d0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 000400e0:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | |||
| 000400f0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 00040100:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 00040110:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 00040090:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 000400a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000400b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000400c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000400d0:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 000400e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000400f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040100:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040110:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040120:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040130:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040140:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040150:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040160:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040170:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040180:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040190:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000401a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 000401b0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 000401c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 000401d0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 000401e0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 000401f0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 00040200:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 00040210:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 00040220:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 00040230:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 00040240:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 00040250:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 00040260:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 00040270:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 00040280:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 00040290:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 000402a0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 000402b0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 000402c0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 000402d0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 000402e0:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 000402f0:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 00040300:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 00040310:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 00040320:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 00040330:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 00040340:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 00040350:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 00040360:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 00040370:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 000403 | 00040120:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | ||
| 00040 | 00040130:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | ||
| 00040 | 00040140:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | ||
| 00040 | 00040150:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 00040 | 00040160:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 00040 | 00040170:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | ||
| 00040 | 00040180:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00040 | 00040190:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00040 | 000401a0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00040 | 000401b0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00040 | 000401c0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000401d0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 000401e0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 000401f0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040430:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 00040440:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040450:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040460:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040470:·2220·6964·3d22·6964·6d35·3638·3522·3e3c··"·id="idm5685">< | |||
| 00040480:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040490:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 000404a0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 000404b0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000404c0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000404d0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000404e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000404f0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040500:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00040510:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00040520:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 00040530:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040540:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040550:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040560:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040570:·3e3c·636f·6465·3e69·6e63·6c75·6465·2069··><code>include·i | |||
| 00040580:·6e73·7461·6c6c·5f61·6964·650a·0a63·6c61··nstall_aide..cla | |||
| 00040590:·7373·2069·6e73·7461·6c6c·5f61·6964·6520··ss·install_aide· | |||
| 000405a0:·7b0a·2020·7061·636b·6167·6520·7b20·2761··{.··package·{·'a | |||
| 000405b0:·6964·6527·3a0a·2020·2020·656e·7375·7265··ide':.····ensure | |||
| 000405c0:·203d·2667·743b·2027·696e·7374·616c·6c65···=>·'installe | |||
| 000405d0:·6427·2c0a·2020·7d0a·7d0a·3c2f·636f·6465··d',.··}.}.</code | |||
| 000405e0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 000405f0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040600:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040610:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040620:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040630:·3536·3836·2220·7461·6269·6e64·6578·3d22··5686"·tabindex=" | |||
| Max diff block lines reached; 218915/246707 bytes (88.73%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Criminal·Justice·Information·Services·(CJIS)·Security·Policy |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cjis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 410, 14 lines modified | Offset 410, 26 lines modified | ||
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 413 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 416 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 418 | [[packages]] | ||
| 419 | name·=·"aide" | ||
| 420 | version·=·"*" | ||
| 421 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 422 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 423 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 424 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 425 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 426 | package·--add=aide | ||
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 422 | -·name:·Ensure·aide·is·installed | 432 | -·name:·Ensure·aide·is·installed |
| 423 | ··package: | 433 | ··package: |
| Offset 432, 31 lines modified | Offset 444, 14 lines modified | ||
| 432 | ··-·PCI-DSSv4-11.5.2 | 444 | ··-·PCI-DSSv4-11.5.2 |
| 433 | ··-·enable_strategy | 445 | ··-·enable_strategy |
| 434 | ··-·low_complexity | 446 | ··-·low_complexity |
| 435 | ··-·low_disruption | 447 | ··-·low_disruption |
| 436 | ··-·medium_severity | 448 | ··-·medium_severity |
| 437 | ··-·no_reboot_needed | 449 | ··-·no_reboot_needed |
| 438 | ··-·package_aide_installed | 450 | ··-·package_aide_installed |
| 439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 444 | include·install_aide | ||
| 445 | class·install_aide·{ | ||
| 446 | ··package·{·'aide': | ||
| 447 | ····ensure·=>·'installed', | ||
| 448 | ··} | ||
| 449 | } | ||
| 450 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 451 | [[packages]] | ||
| 452 | name·=·"aide" | ||
| 453 | version·=·"*" | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 459 | #·Remediation·is·applicable·only·in·certain·platforms | 456 | #·Remediation·is·applicable·only·in·certain·platforms |
| 460 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 457 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 464, 21 lines modified | Offset 459, 26 lines modified | ||
| 464 | if·!·rpm·-q·--quiet·"aide"·;·then | 459 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 465 | ····yum·install·-y·"aide" | 460 | ····yum·install·-y·"aide" |
| 466 | fi | 461 | fi |
| 467 | else | 462 | else |
| 468 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 463 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 469 | fi | 464 | fi |
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 465 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 466 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 467 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 468 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 469 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 470 | include·install_aide | ||
| 475 | 471 | class·install_aide·{ | |
| 472 | ··package·{·'aide': | ||
| 473 | ····ensure·=>·'installed', | ||
| 474 | ··} | ||
| 475 | } | ||
| 476 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 476 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 477 | Run·the·following·command·to·generate·a·new·database: | 477 | Run·the·following·command·to·generate·a·new·database: |
| 478 | $·sudo·/usr/sbin/aide·--init | 478 | $·sudo·/usr/sbin/aide·--init |
| 479 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 479 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 480 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 480 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 481 | To·initiate·a·manual·check,·run·the·following·command: | 481 | To·initiate·a·manual·check,·run·the·following·command: |
| 482 | $·sudo·/usr/sbin/aide·--check | 482 | $·sudo·/usr/sbin/aide·--check |
| Offset 5556, 38 lines modified | Offset 5556, 14 lines modified | ||
| 5556 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 5556 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 5557 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 5557 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 5558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 5558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 5559 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 5559 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 5560 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 | 5560 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 |
| 5561 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 5561 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 5562 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule | 5562 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule |
| 5563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5564 | --- | ||
| 5565 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 5566 | kind:·MachineConfig | ||
| 5567 | spec: | ||
| 5568 | ··config: | ||
| 5569 | ····ignition: | ||
| 5570 | ······version:·3.1.0 | ||
| 5571 | ····storage: | ||
| 5572 | ······files: | ||
| 5573 | ······-·contents: | ||
| 5574 | ··········source: | ||
| 5575 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 5576 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 5577 | ········mode:·0644 | ||
| 5578 | ········path:·/etc/pam.d/password-auth | ||
| 5579 | ········overwrite:·true | ||
| 5580 | ······-·contents: | ||
| Max diff block lines reached; 21140/35128 bytes (60.18%) of diff not shown. | |||
| Offset 14330, 15 lines modified | Offset 14330, 15 lines modified | ||
| 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037f90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fa0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037fe0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ff0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038000:·323 | 00038000:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038010:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038020:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038030:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038040:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038050:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038060:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038070:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15098, 203 lines modified | Offset 15098, 203 lines modified | ||
| 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003afa0:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003afb0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afc0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afd0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afe0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003aff0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003b000:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003b010:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003b020:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b030:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b040:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b050:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b060:·3536·3834·223e·3c70·7265·3e3c·636f·6465··5684"><pre><code | |||
| 0003b070:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b080:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b090:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b010:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b020:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b030:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b040:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b050:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003b060:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b070:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b080:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b090:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b0a0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b0b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0d0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0e0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0f0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b100:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b110:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b120:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b130:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b140:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b150:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b160:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b170:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b180:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b190:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b1a0:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b1b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b200:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b210:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b220:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b230:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b240:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b250:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b260:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b270:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b280:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b290:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b2a0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b2b0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b2c0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b2d0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b2e0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b2f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b | 0003b0a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003b | 0003b0b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003b | 0003b0c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003b | 0003b0d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003b | 0003b0e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b35 | 0003b0f0:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | ||
| 0003b | 0003b100:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b | 0003b110:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b | 0003b120:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b39 | 0003b130:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b | 0003b140:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b150:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0003b160:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 0003b170:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b180:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b190:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b1a0:·6d35·3638·3522·3e3c·7461·626c·6520·636c··m5685"><table·cl | |||
| 0003b1b0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b1c0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b1d0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b1e0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b1f0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b3b0:·7469·6f6e·2050·7570·7065·7420·736e·6970··tion·Puppet·snip | |||
| 0003b3c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b3d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b3e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b3f0:·7365·2220·6964·3d22·6964·6d35·3638·3522··se"·id="idm5685" | |||
| 0003b400:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b410:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b420:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b430:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b440:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b450:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b460:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b470:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b480:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b490:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b4a0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b4b0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b4c0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b4d0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b4e0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b4f0:·7265·3e3c·636f·6465·3e69·6e63·6c75·6465··re><code>include | |||
| 0003b500:·2069·6e73·7461·6c6c·5f61·6964·650a·0a63···install_aide..c | |||
| 0003b510:·6c61·7373·2069·6e73·7461·6c6c·5f61·6964··lass·install_aid | |||
| 0003b520:·6520·7b0a·2020·7061·636b·6167·6520·7b20··e·{.··package·{· | |||
| 0003b530:·2761·6964·6527·3a0a·2020·2020·656e·7375··'aide':.····ensu | |||
| Max diff block lines reached; 2505799/2533591 bytes (98.90%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Unclassified·Information·in·Non-federal·Information·Systems·and |
| 51 | ··············Organizations·(NIST·800-171) | 51 | ··············Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:8 | 54 | ····*·cpe:/o:oracle:linux:8 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 26 lines modified | ||
| 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 108 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 111 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 114 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·--add=aide | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 121 | ··package: | 131 | ··package: |
| Offset 130, 31 lines modified | Offset 142, 14 lines modified | ||
| 130 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 131 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 132 | ··-·low_complexity | 144 | ··-·low_complexity |
| 133 | ··-·low_disruption | 145 | ··-·low_disruption |
| 134 | ··-·medium_severity | 146 | ··-·medium_severity |
| 135 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 136 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | include·install_aide | ||
| 143 | class·install_aide·{ | ||
| 144 | ··package·{·'aide': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | } | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 157, 26 lines modified | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | 157 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 163 | ····yum·install·-y·"aide" | 158 | ····yum·install·-y·"aide" |
| 164 | fi | 159 | fi |
| 165 | else | 160 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 162 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | include·install_aide | ||
| 173 | 169 | class·install_aide·{ | |
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 174 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 175 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 176 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 177 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 295, 14 lines modified | Offset 295, 18 lines modified | ||
| 295 | ············_\x8i_\x8s_\x8m······1446 | 295 | ············_\x8i_\x8s_\x8m······1446 |
| 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 296 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 297 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 298 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 299 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 300 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 301 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 303 | [customizations] | ||
| 304 | fips·=·true | ||
| 302 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 303 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 304 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 305 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 306 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 307 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 310 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 308 | ··set_fact: | 311 | ··set_fact: |
| Offset 402, 18 lines modified | Offset 406, 14 lines modified | ||
| 402 | ··-·NIST-800-53-SC-13 | 406 | ··-·NIST-800-53-SC-13 |
| 403 | ··-·enable_fips_mode | 407 | ··-·enable_fips_mode |
| 404 | ··-·high_severity | 408 | ··-·high_severity |
| 405 | ··-·medium_complexity | 409 | ··-·medium_complexity |
| 406 | ··-·medium_disruption | 410 | ··-·medium_disruption |
| 407 | ··-·reboot_required | 411 | ··-·reboot_required |
| Max diff block lines reached; 230252/236581 bytes (97.32%) of diff not shown. | |||
| Offset 14297, 16 lines modified | Offset 14297, 16 lines modified | ||
| 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d80:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d90:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037da0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037db0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037dc0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dd0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037df0:·2020·2861·7320·6f66·2032·3032·3 | 00037df0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037e00:·2d32·3 | 00037e00:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e10:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e20:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e30:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e40:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e50:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e60:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e70:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19092, 274 lines modified | Offset 19092, 274 lines modified | ||
| 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0004a930:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | 0004a940:·2369·646d·3130·3132·3422·2074·6162·696e··#idm10124"·tabin | ||
| 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0004a950:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0004a960:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0004a970:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0004a980:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0004a990:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·204 | 0004a9a0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0004a9b0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 0004a9b0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0004a9c0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0004a9d0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0004a9e0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0004a9f0:·2269·646d·3130·3132·3422·3e3c·7461·626c··"idm10124"><tabl | |||
| 0004aa00:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0004aa10:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0004aa20:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0004aa30:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0004aa40:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0004aa50:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0004aa60:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0004aa70:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004aa80:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004aa90:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0004aaa0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0004aab0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0004aac0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0004aad0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0004aae0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0004aaf0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0004ab00:·6520·7265·6172·2069·7320·696e·7374·616c··e·rear·is·instal | |||
| 0004ab10:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0004ab20:·2020·206e·616d·653a·2072·6561·720a·2020·····name:·rear.·· | |||
| 0004ab30:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0004ab40:·0a20·2077·6865·6e3a·206e·6f74·2028·2028··.··when:·not·(·( | |||
| 0004ab50:·2028·2061·6e73·6962·6c65·5f61·7263·6869···(·ansible_archi | |||
| 0004ab60:·7465·6374·7572·6520·3d3d·2022·6161·7263··tecture·==·"aarc | |||
| 0004ab70:·6836·3422·2061·6e64·2061·6e73·6962·6c65··h64"·and·ansible | |||
| 0004ab80:·5f64·6973·7472·6962·7574·696f·6e20·3d3d··_distribution·== | |||
| 0004ab90:·2027·4f72·6163·6c65·4c69·6e75·7827·0a20···'OracleLinux'.· | |||
| 0004aba0:·2020·2061·6e64·2061·6e73·6962·6c65·5f64·····and·ansible_d | |||
| 0004abb0:·6973·7472·6962·7574·696f·6e5f·7665·7273··istribution_vers | |||
| 0004abc0:·696f·6e20·6973·2076·6572·7369·6f6e·2827··ion·is·version(' | |||
| 0004abd0:·392e·3027·2c20·2726·6774·3b3d·2729·2029··9.0',·'>=')·) | |||
| 0004abe0:·206f·7220·2820·616e·7369·626c·655f·6172···or·(·ansible_ar | |||
| 0004abf0:·6368·6974·6563·7475·7265·0a20·2020·203d··chitecture.····= | |||
| 0004ac00:·3d20·2261·6172·6368·3634·2220·616e·6420··=·"aarch64"·and· | |||
| 0004ac10:·616e·7369·626c·655f·6469·7374·7269·6275··ansible_distribu | |||
| 0004ac20:·7469·6f6e·203d·3d20·2752·6564·4861·7427··tion·==·'RedHat' | |||
| 0004ac30:·2061·6e64·2061·6e73·6962·6c65·5f64·6973···and·ansible_dis | |||
| 0004ac40:·7472·6962·7574·696f·6e5f·7665·7273·696f··tribution_versio | |||
| 0004ac50:·6e0a·2020·2020·6973·2076·6572·7369·6f6e··n.····is·version | |||
| 0004ac60:·2827·392e·3027·2c20·2726·6774·3b3d·2729··('9.0',·'>=') | |||
| 0004ac70:·2029·206f·7220·2820·616e·7369·626c·655f···)·or·(·ansible_ | |||
| 0004ac80:·6469·7374·7269·6275·7469·6f6e·203d·3d20··distribution·==· | |||
| 0004ac90:·2752·6564·4861·7427·2061·6e64·2061·6e73··'RedHat'·and·ans | |||
| 0004aca0:·6962·6c65·5f64·6973·7472·6962·7574·696f··ible_distributio | |||
| 0004acb0:·6e5f·7665·7273·696f·6e0a·2020·2020·6973··n_version.····is | |||
| 0004acc0:·2076·6572·7369·6f6e·2827·382e·3427·2c20···version('8.4',· | |||
| 0004acd0:·2726·6c74·3b3d·2729·2061·6e64·2061·6e73··'<=')·and·ans | |||
| 0004ace0:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | |||
| 0004acf0:·6520·3d3d·2022·7333·3930·7822·2029·2029··e·==·"s390x"·)·) | |||
| 0004ad00:·2029·0a20·2074·6167·733a·0a20·202d·2065···).··tags:.··-·e | |||
| 0004ad10:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0004ad20:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0004ad30:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0004ad40:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0004ad50:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0004ad60:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0004ad70:·2d20·7061·636b·6167·655f·7265·6172·5f69··-·package_rear_i | |||
| 0004ad80:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0004ad90:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0004ada0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0004adb0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0004adc0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0004add0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0004ade0:·3031·3235·2220·7461·6269·6e64·6578·3d22··0125"·tabindex=" | |||
| 0004adf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004ae00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004ae10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004ae20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004ae30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004ae40:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 0004a | 0004a9c0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0004a | 0004a9d0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a | 0004a9e0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a | 0004a9f0:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | ||
| 0004aa00:·3132·3422·3e3c·7072·653e·3c63·6f64·653e··124"><pre><code> | |||
| 0004aa10:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0004aa20:·6d65·203d·2022·7265·6172·220a·7665·7273··me·=·"rear".vers | |||
| 0004aa30:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0004aa40:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004aa50:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004aa60:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004aa70:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004aa80:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004aa90:·3130·3132·3522·2074·6162·696e·6465·783d··10125"·tabindex= | |||
| 0004aaa0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0004aab0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0004aac0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0004aad0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0004aae0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0004aaf0:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0004ab00:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 0004ab10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004ab20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004ab30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004ab40:·6d31·3031·3235·223e·3c74·6162·6c65·2063··m10125"><table·c | |||
| 0004ab50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0004ab60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| Max diff block lines reached; 801113/838841 bytes (95.50%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:oracle:linux:8 | 45 | ····*·cpe:/o:oracle:linux:8 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 967, 14 lines modified | Offset 967, 26 lines modified | ||
| 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 967 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 968 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 969 | The·rear·package·can·be·installed·with·the·following·command: | 969 | The·rear·package·can·be·installed·with·the·following·command: |
| 970 | $·sudo·yum·install·rear | 970 | $·sudo·yum·install·rear |
| 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 971 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 972 | Severity: ·medium | 972 | Severity: ·medium |
| 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 973 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 975 | [[packages]] | ||
| 976 | name·=·"rear" | ||
| 977 | version·=·"*" | ||
| 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 983 | package·--add=rear | ||
| 974 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 984 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 975 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 985 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 976 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 986 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 977 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 987 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 978 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 988 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 979 | -·name:·Ensure·rear·is·installed | 989 | -·name:·Ensure·rear·is·installed |
| 980 | ··package: | 990 | ··package: |
| Offset 988, 31 lines modified | Offset 1000, 14 lines modified | ||
| 988 | ··tags: | 1000 | ··tags: |
| 989 | ··-·enable_strategy | 1001 | ··-·enable_strategy |
| 990 | ··-·low_complexity | 1002 | ··-·low_complexity |
| 991 | ··-·low_disruption | 1003 | ··-·low_disruption |
| 992 | ··-·medium_severity | 1004 | ··-·medium_severity |
| 993 | ··-·no_reboot_needed | 1005 | ··-·no_reboot_needed |
| 994 | ··-·package_rear_installed | 1006 | ··-·package_rear_installed |
| 995 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 996 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 997 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 998 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 999 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1000 | include·install_rear | ||
| 1001 | class·install_rear·{ | ||
| 1002 | ··package·{·'rear': | ||
| 1003 | ····ensure·=>·'installed', | ||
| 1004 | ··} | ||
| 1005 | } | ||
| 1006 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1007 | [[packages]] | ||
| 1008 | name·=·"rear" | ||
| 1009 | version·=·"*" | ||
| 1010 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1007 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1011 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1008 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1012 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1009 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1013 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1010 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1014 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1011 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1015 | #·Remediation·is·applicable·only·in·certain·platforms | 1012 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1016 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 1013 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1020, 21 lines modified | Offset 1015, 26 lines modified | ||
| 1020 | if·!·rpm·-q·--quiet·"rear"·;·then | 1015 | if·!·rpm·-q·--quiet·"rear"·;·then |
| 1021 | ····yum·install·-y·"rear" | 1016 | ····yum·install·-y·"rear" |
| 1022 | fi | 1017 | fi |
| 1023 | else | 1018 | else |
| 1024 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1019 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1025 | fi | 1020 | fi |
| 1026 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1021 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1027 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1022 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1028 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1023 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1029 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1024 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1030 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1025 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1026 | include·install_rear | ||
| 1031 | 1027 | class·install_rear·{ | |
| 1028 | ··package·{·'rear': | ||
| 1029 | ····ensure·=>·'installed', | ||
| 1030 | ··} | ||
| 1031 | } | ||
| 1032 | Group ·Updating·Software· Group·contains·6·rules | 1032 | Group ·Updating·Software· Group·contains·6·rules |
| 1033 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1033 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1034 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1034 | Oracle·Linux·8·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1035 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1035 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1036 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1036 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1559, 38 lines modified | Offset 1559, 14 lines modified | ||
| 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1559 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1560 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1561 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1561 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1562 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1562 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1563 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 | 1563 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 |
| 1564 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1564 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1565 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule | 1565 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule |
| 1566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1567 | --- | ||
| 1568 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1569 | kind:·MachineConfig | ||
| 1570 | spec: | ||
| 1571 | ··config: | ||
| 1572 | ····ignition: | ||
| 1573 | ······version:·3.1.0 | ||
| 1574 | ····storage: | ||
| 1575 | ······files: | ||
| 1576 | ······-·contents: | ||
| 1577 | ··········source: | ||
| 1578 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1579 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1580 | ········mode:·0644 | ||
| 1581 | ········path:·/etc/pam.d/password-auth | ||
| 1582 | ········overwrite:·true | ||
| 1583 | ······-·contents: | ||
| Max diff block lines reached; 88956/104204 bytes (85.37%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21304, 328 lines modified | Offset 21304, 328 lines modified | ||
| 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00053370:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | 00053380:·3d22·2369·646d·3134·3038·3122·2074·6162··="#idm14081"·tab | ||
| 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00053390:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 000533a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 000533b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 000533c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000533d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 000533e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000533f0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00053400:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00053410:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00053420:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00053430:·643d·2269·646d·3134·3038·3122·3e3c·7461··d="idm14081"><ta | |||
| 00053440:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00053450:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00053460:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00053470:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00053480:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00053490:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 000534a0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000534b0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 000534c0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 000534d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 000534e0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 000534f0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00053500:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00053510:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 00053 | 000533f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 00053400:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00053410:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00053420:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00053430:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00053440:·3134·3038·3122·3e3c·7072·653e·3c63·6f64··14081"><pre><cod | |||
| 00053450:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 00053460:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 00053470:·6b65·6420·3d20·5b22·6465·6275·672d·7368··ked·=·["debug-sh | |||
| 00053480:·656c·6c22·5d0a·3c2f·636f·6465·3e3c·2f70··ell"].</code></p | |||
| 00053490:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000534a0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 000534b0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 000534c0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 000534d0:·7461·7267·6574·3d22·2369·646d·3134·3038··target="#idm1408 | |||
| 000534e0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 000534f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 00053500:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 00053510:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 00053520:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 00053530:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 00053540:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00053550:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00053560:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00053570:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00053580:·7073·6522·2069·643d·2269·646d·3134·3038··pse"·id="idm1408 | |||
| 00053590:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 000535a0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 000535b0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 000535c0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 000535d0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 000535e0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 000535f0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00053600:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00053610:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00053620:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00053630:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 00053640:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 00053650:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00053660:·2f74·683e·3c74·643e·6469·7361·626c·653c··/th><td>disable< | |||
| 00053670:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00053680:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00053690:·6d65·3a20·4469·7361·626c·6520·6465·6275··me:·Disable·debu | |||
| 000536a0:·672d·7368·656c·6c20·5379·7374·656d·4420··g-shell·SystemD· | |||
| 000536b0:·5365·7276·6963·6520·2d20·436f·6c6c·6563··Service·-·Collec | |||
| 000536c0:·7420·7379·7374·656d·6420·5365·7276·6963··t·systemd·Servic | |||
| 000536d0:·6573·2050·7265·7365·6e74·2069·6e0a·2020··es·Present·in.·· | |||
| 000536e0:·2020·7468·6520·5379·7374·656d·0a20·2061····the·System.··a | |||
| 000536f0:·6e73·6962·6c65·2e62·7569·6c74·696e·2e63··nsible.builtin.c | |||
| 00053700:·6f6d·6d61·6e64·3a20·7379·7374·656d·6374··ommand:·systemct | |||
| 00053710:·6c20·2d71·206c·6973·742d·756e·6974·2d66··l·-q·list-unit-f | |||
| 00053720:·696c·6573·202d·2d74·7970·6520·7365·7276··iles·--type·serv | |||
| 00053730:·6963·650a·2020·7265·6769·7374·6572·3a20··ice.··register:· | |||
| 00053740:·7365·7276·6963·655f·6578·6973·7473·0a20··service_exists.· | |||
| 00053750:·2063·6861·6e67·6564·5f77·6865·6e3a·2066···changed_when:·f | |||
| 00053760:·616c·7365·0a20·2066·6169·6c65·645f·7768··alse.··failed_wh | |||
| 00053770:·656e·3a20·7365·7276·6963·655f·6578·6973··en:·service_exis | |||
| 00053780:·7473·2e72·6320·6e6f·7420·696e·205b·302c··ts.rc·not·in·[0, | |||
| 00053790:·2031·5d0a·2020·6368·6563·6b5f·6d6f·6465···1].··check_mode | |||
| 000537a0:·3a20·6661·6c73·650a·2020·7768·656e·3a20··:·false.··when:· | |||
| 000537b0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 000537c0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000537d0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000537e0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000537f0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00053800:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00053810:·2d20·4449·5341·2d53·5449·472d·4f4c·3038··-·DISA-STIG-OL08 | |||
| 00053820:·2d30·302d·3034·3031·3830·0a20·202d·204e··-00-040180.··-·N | |||
| 00053830:·4953·542d·3830·302d·3137·312d·332e·342e··IST-800-171-3.4. | |||
| 00053840:·350a·2020·2d20·4e49·5354·2d38·3030·2d35··5.··-·NIST-800-5 | |||
| 00053850:·332d·434d·2d36·0a20·202d·2064·6973·6162··3-CM-6.··-·disab | |||
| 00053860:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00053870:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 00053880:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 00053890:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000538a0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000538b0:·6f6f·745f·6e65·6564·6564·0a20·202d·2073··oot_needed.··-·s | |||
| 000538c0:·6572·7669·6365·5f64·6562·7567·2d73·6865··ervice_debug-she | |||
| 000538d0:·6c6c·5f64·6973·6162·6c65·640a·0a2d·206e··ll_disabled..-·n | |||
| 000538e0:·616d·653a·2044·6973·6162·6c65·2064·6562··ame:·Disable·deb | |||
| 000538f0:·7567·2d73·6865·6c6c·2053·7973·7465·6d44··ug-shell·SystemD | |||
| 00053900:·2053·6572·7669·6365·202d·2045·6e73·7572···Service·-·Ensur | |||
| 00053910:·6520·6465·6275·672d·7368·656c·6c2e·7365··e·debug-shell.se | |||
| 00053920:·7276·6963·6520·6973·204d·6173·6b65·640a··rvice·is·Masked. | |||
| Max diff block lines reached; 680268/725310 bytes (93.79%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:8 | 50 | ····*·cpe:/o:oracle:linux:8 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1342, 14 lines modified | Offset 1342, 18 lines modified | ||
| 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1342 | ············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1343 | ············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 | 1344 | References:·_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1345 | ············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1346 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 | 1347 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··OL08-00-040180 |
| 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule | 1348 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-248872r991589_rule |
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1350 | [customizations.services] | ||
| 1351 | masked·=·["debug-shell"] | ||
| 1349 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1352 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1350 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1353 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1351 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1354 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1352 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1355 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1353 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1356 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1354 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1357 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1355 | ····the·System | 1358 | ····the·System |
| Offset 1423, 31 lines modified | Offset 1427, 14 lines modified | ||
| 1423 | ··-·NIST-800-53-CM-6 | 1427 | ··-·NIST-800-53-CM-6 |
| 1424 | ··-·disable_strategy | 1428 | ··-·disable_strategy |
| 1425 | ··-·low_complexity | 1429 | ··-·low_complexity |
| 1426 | ··-·low_disruption | 1430 | ··-·low_disruption |
| 1427 | ··-·medium_severity | 1431 | ··-·medium_severity |
| 1428 | ··-·no_reboot_needed | 1432 | ··-·no_reboot_needed |
| 1429 | ··-·service_debug-shell_disabled | 1433 | ··-·service_debug-shell_disabled |
| 1430 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1431 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1432 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1433 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1434 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1435 | include·disable_debug-shell | ||
| 1436 | class·disable_debug-shell·{ | ||
| 1437 | ··service·{'debug-shell': | ||
| 1438 | ····enable·=>·false, | ||
| 1439 | ····ensure·=>·'stopped', | ||
| 1440 | ··} | ||
| 1441 | } | ||
| 1442 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1443 | [customizations.services] | ||
| 1444 | masked·=·["debug-shell"] | ||
| 1445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1434 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1446 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1435 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1447 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1436 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1448 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1437 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1449 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1438 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1450 | #·Remediation·is·applicable·only·in·certain·platforms | 1439 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1451 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1440 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1465, 14 lines modified | Offset 1452, 27 lines modified | ||
| 1465 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1452 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1466 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1453 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1467 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1454 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1468 | else | 1455 | else |
| 1469 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1456 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1470 | fi | 1457 | fi |
| 1458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1463 | include·disable_debug-shell | ||
| 1464 | class·disable_debug-shell·{ | ||
| 1465 | ··service·{'debug-shell': | ||
| 1466 | ····enable·=>·false, | ||
| 1467 | ····ensure·=>·'stopped', | ||
| 1468 | ··} | ||
| 1469 | } | ||
| 1471 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1470 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1472 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. | 1471 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. |
| 1473 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: | 1472 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: |
| 1474 | CtrlAltDelBurstAction=none | 1473 | CtrlAltDelBurstAction=none |
| 1475 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. | 1474 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. |
| 1476 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. | 1475 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. |
| Offset 1865, 38 lines modified | Offset 1865, 14 lines modified | ||
| 1865 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1865 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1866 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1866 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1867 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1867 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1868 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1868 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1869 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 | 1869 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 |
| 1870 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1870 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1871 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule | 1871 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule |
| 1872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1873 | --- | ||
| 1874 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1875 | kind:·MachineConfig | ||
| 1876 | spec: | ||
| 1877 | ··config: | ||
| 1878 | ····ignition: | ||
| 1879 | ······version:·3.1.0 | ||
| 1880 | ····storage: | ||
| 1881 | ······files: | ||
| 1882 | ······-·contents: | ||
| 1883 | ··········source: | ||
| 1884 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1885 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1886 | ········mode:·0644 | ||
| 1887 | ········path:·/etc/pam.d/password-auth | ||
| 1888 | ········overwrite:·true | ||
| 1889 | ······-·contents: | ||
| 1890 | ··········source: | ||
| 1891 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1892 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1893 | ········mode:·0644 | ||
| 1894 | ········path:·/etc/pam.d/system-auth | ||
| 1895 | ········overwrite:·true | ||
| 1896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 72683/86952 bytes (83.59%) of diff not shown. | |||
| Offset 14305, 15 lines modified | Offset 14305, 15 lines modified | ||
| 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e00:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e10:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e20:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e30:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e40:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e50:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e60:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e70:·323 | 00037e70:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e80:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e90:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037ea0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037eb0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037ec0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ed0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037ee0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15073, 203 lines modified | Offset 15073, 203 lines modified | ||
| 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003ae00:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | 0003ae10:·743d·2223·6964·6d35·3638·3422·2074·6162··t="#idm5684"·tab | ||
| 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003ae20:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003ae30:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003ae40:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003ae50:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003ae60:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003ae70:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003ae80:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003ae90:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003aea0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003aeb0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003aec0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003aed0:·3536·3834·223e·3c70·7265·3e3c·636f·6465··5684"><pre><code | |||
| 0003aee0:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003aef0:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003af00:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003af10:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003af20:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003af30:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003af40:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003af50:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003af60:·6d35·3638·3522·2074·6162·696e·6465·783d··m5685"·tabindex= | |||
| 0003af70:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003af80:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003af90:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003afa0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003afb0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003afc0:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 0003afd0:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 0003afe0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003aff0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b000:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b010:·6d35·3638·3522·3e3c·7461·626c·6520·636c··m5685"><table·cl | |||
| 0003b020:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b030:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b040:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b050:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b060:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b070:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b080:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b090:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b0a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b0b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b0c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b0d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b0e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b0f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b100:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 0003b110:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 0003b120:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 0003b130:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b140:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b150:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b160:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b170:·6765·743d·2223·6964·6d35·3638·3622·2074··get="#idm5686"·t | |||
| 0003b180:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b190:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b1a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b1b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b1c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b1d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003 | 0003b1e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | ||
| 0003ae90:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003aea0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003aeb0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003aec0:·643d·2269·646d·3536·3834·223e·3c74·6162··d="idm5684"><tab | |||
| 0003aed0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003aee0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003aef0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003af00:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003af10:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003af20:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003af30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003af40:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003af50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003af60:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003af70:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003af80:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003af90:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003afa0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003afb0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003afc0:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003afd0:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003afe0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003aff0:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b000:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b010:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b020:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b030:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b040:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b050:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b060:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b070:·2020·7461·6773·3a0a·2020·2d20·434a·4953····tags:.··-·CJIS | |||
| 0003b080:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b090:·5341·2d53·5449·472d·4f4c·3038·2d30·302d··SA-STIG-OL08-00- | |||
| 0003b0a0:·3031·3033·3539·0a20·202d·204e·4953·542d··010359.··-·NIST- | |||
| 0003b0b0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b0c0:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b0d0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b0e0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b0f0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b100:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b110:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b120:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b130:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b140:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b150:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b160:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003b170:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b180:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| Max diff block lines reached; 2505799/2533591 bytes (98.90%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:8 | 47 | ····*·cpe:/o:oracle:linux:8 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 26 lines modified | ||
| 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 101 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 102 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 103 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 104 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 106 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·aide·is·installed | 123 | -·name:·Ensure·aide·is·installed |
| 114 | ··package: | 124 | ··package: |
| Offset 123, 31 lines modified | Offset 135, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 135 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 137 | ··-·low_complexity |
| 126 | ··-·low_disruption | 138 | ··-·low_disruption |
| 127 | ··-·medium_severity | 139 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 141 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | } | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 21 lines modified | Offset 150, 26 lines modified | ||
| 155 | if·!·rpm·-q·--quiet·"aide"·;·then | 150 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 156 | ····yum·install·-y·"aide" | 151 | ····yum·install·-y·"aide" |
| 157 | fi | 152 | fi |
| 158 | else | 153 | else |
| 159 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 154 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 160 | fi | 155 | fi |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | include·install_aide | ||
| 166 | 162 | class·install_aide·{ | |
| 163 | ··package·{·'aide': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 167 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 168 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. | 169 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Oracle·Linux·8. |
| 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 170 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 288, 14 lines modified | Offset 288, 18 lines modified | ||
| 288 | ············_\x8i_\x8s_\x8m······1446 | 288 | ············_\x8i_\x8s_\x8m······1446 |
| 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 289 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 290 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 291 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 292 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 293 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 294 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 296 | [customizations] | ||
| 297 | fips·=·true | ||
| 295 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 298 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 296 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 299 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 297 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 300 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 298 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 301 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 299 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 302 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 300 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 303 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 301 | ··set_fact: | 304 | ··set_fact: |
| Offset 395, 18 lines modified | Offset 399, 14 lines modified | ||
| 395 | ··-·NIST-800-53-SC-13 | 399 | ··-·NIST-800-53-SC-13 |
| 396 | ··-·enable_fips_mode | 400 | ··-·enable_fips_mode |
| 397 | ··-·high_severity | 401 | ··-·high_severity |
| 398 | ··-·medium_complexity | 402 | ··-·medium_complexity |
| 399 | ··-·medium_disruption | 403 | ··-·medium_disruption |
| 400 | ··-·reboot_required | 404 | ··-·reboot_required |
| Max diff block lines reached; 230252/236628 bytes (97.31%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16398, 202 lines modified | Offset 16398, 202 lines modified | ||
| 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | 000400d0:·7267·6574·3d22·2369·646d·3536·3834·2220··rget="#idm5684"· | ||
| 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 000400e0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 000400f0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00040100:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00040110:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00040120:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00040130:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00040140:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00040150:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040160:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040170:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040180:·2220·6964·3d22·6964·6d35·3638·3422·3e3c··"·id="idm5684">< | |||
| 00040190:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 000401a0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 000401b0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 000401c0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 000401d0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 000401e0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 000401f0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040 | 00040140:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 00040150:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00040160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 00040190:·6964·6d35·3638·3422·3e3c·7072·653e·3c63··idm5684"><pre><c | |||
| 000401a0:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 000401b0:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 000401c0:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 000401d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 000401e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 000401f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00040200:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00040210:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00040220:·2369·646d·3536·3835·2220·7461·6269·6e64··#idm5685"·tabind | |||
| 00040230:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00040240:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00040250:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00040260:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00040270:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00040280:·5265·6d65·6469·6174·696f·6e20·416e·6163··Remediation·Anac | |||
| 00040290:·6f6e·6461·2073·6e69·7070·6574·20e2·87b2··onda·snippet·... | |||
| 000402a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000402b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000402c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000402d0:·2269·646d·3536·3835·223e·3c74·6162·6c65··"idm5685"><table | |||
| 000402e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000402f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00040300:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00040310:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040320:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040 | 00040330:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 00040 | 00040340:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 00040350:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040360:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040370:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040380:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040390:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00040 | 000403a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 00040240:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040250:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 00040260:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 00040270:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00040280:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 00040290:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 000402a0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 000402b0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 000402c0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 000402d0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 000402e0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 000402f0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 00040300:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 00040310:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 00040320:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 00040330:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 00040340:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 00040350:·2044·4953·412d·5354·4947·2d4f·4c30·382d···DISA-STIG-OL08- | |||
| 00040360:·3030·2d30·3130·3335·390a·2020·2d20·4e49··00-010359.··-·NI | |||
| 00040370:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 00040380:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 00040390:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| 000403a0:·5353·7634·2d31·312e·352e·320a·2020·2d20··SSv4-11.5.2.··-· | |||
| 000403b0:·656e·6162·6c65·5f73·7472·6174·6567·790a··enable_strategy. | |||
| 000403c0:·2020·2d20·6c6f·775f·636f·6d70·6c65·7869····-·low_complexi | |||
| 000403d0:·7479·0a20·202d·206c·6f77·5f64·6973·7275··ty.··-·low_disru | |||
| 000403e0:·7074·696f·6e0a·2020·2d20·6d65·6469·756d··ption.··-·medium | |||
| 000403f0:·5f73·6576·6572·6974·790a·2020·2d20·6e6f··_severity.··-·no | |||
| 00040400:·5f72·6562·6f6f·745f·6e65·6564·6564·0a20··_reboot_needed.· | |||
| 00040410:·202d·2070·6163·6b61·6765·5f61·6964·655f···-·package_aide_ | |||
| 00040420:·696e·7374·616c·6c65·640a·3c2f·636f·6465··installed.</code | |||
| 00040430:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040440:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040450:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040460:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040470:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040480:·3536·3835·2220·7461·6269·6e64·6578·3d22··5685"·tabindex=" | |||
| 00040490:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 000404a0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 000404b0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 000404c0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 000404d0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 000404e0:·6469·6174·696f·6e20·5075·7070·6574·2073··diation·Puppet·s | |||
| 000404f0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040500:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040510:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040520:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 00040530:·3835·223e·3c74·6162·6c65·2063·6c61·7373··85"><table·class | |||
| 00040540:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040550:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040560:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040570:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040580:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| Max diff block lines reached; 862973/890627 bytes (96.89%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·8 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:8 | 44 | ····*·cpe:/o:oracle:linux:8 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 411, 14 lines modified | Offset 411, 26 lines modified | ||
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 414 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 415 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 416 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 417 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 419 | [[packages]] | ||
| 420 | name·=·"aide" | ||
| 421 | version·=·"*" | ||
| 422 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 423 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 424 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 425 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 426 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 427 | package·--add=aide | ||
| 418 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 428 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 419 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 429 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 420 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 430 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 421 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 431 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 422 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 432 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 423 | -·name:·Ensure·aide·is·installed | 433 | -·name:·Ensure·aide·is·installed |
| 424 | ··package: | 434 | ··package: |
| Offset 433, 31 lines modified | Offset 445, 14 lines modified | ||
| 433 | ··-·PCI-DSSv4-11.5.2 | 445 | ··-·PCI-DSSv4-11.5.2 |
| 434 | ··-·enable_strategy | 446 | ··-·enable_strategy |
| 435 | ··-·low_complexity | 447 | ··-·low_complexity |
| 436 | ··-·low_disruption | 448 | ··-·low_disruption |
| 437 | ··-·medium_severity | 449 | ··-·medium_severity |
| 438 | ··-·no_reboot_needed | 450 | ··-·no_reboot_needed |
| 439 | ··-·package_aide_installed | 451 | ··-·package_aide_installed |
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | include·install_aide | ||
| 446 | class·install_aide·{ | ||
| 447 | ··package·{·'aide': | ||
| 448 | ····ensure·=>·'installed', | ||
| 449 | ··} | ||
| 450 | } | ||
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 452 | [[packages]] | ||
| 453 | name·=·"aide" | ||
| 454 | version·=·"*" | ||
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 460 | #·Remediation·is·applicable·only·in·certain·platforms | 457 | #·Remediation·is·applicable·only·in·certain·platforms |
| 461 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 458 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 465, 21 lines modified | Offset 460, 26 lines modified | ||
| 465 | if·!·rpm·-q·--quiet·"aide"·;·then | 460 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 466 | ····yum·install·-y·"aide" | 461 | ····yum·install·-y·"aide" |
| 467 | fi | 462 | fi |
| 468 | else | 463 | else |
| 469 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 464 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 470 | fi | 465 | fi |
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 467 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 468 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 469 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 470 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 471 | include·install_aide | ||
| 476 | 472 | class·install_aide·{ | |
| 473 | ··package·{·'aide': | ||
| 474 | ····ensure·=>·'installed', | ||
| 475 | ··} | ||
| 476 | } | ||
| 477 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 477 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 478 | Run·the·following·command·to·generate·a·new·database: | 478 | Run·the·following·command·to·generate·a·new·database: |
| 479 | $·sudo·/usr/sbin/aide·--init | 479 | $·sudo·/usr/sbin/aide·--init |
| 480 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 480 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 481 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 481 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 482 | To·initiate·a·manual·check,·run·the·following·command: | 482 | To·initiate·a·manual·check,·run·the·following·command: |
| 483 | $·sudo·/usr/sbin/aide·--check | 483 | $·sudo·/usr/sbin/aide·--check |
| Offset 2513, 14 lines modified | Offset 2513, 26 lines modified | ||
| 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2513 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2514 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2515 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2516 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2517 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2518 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2519 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2521 | [[packages]] | ||
| 2522 | name·=·"sudo" | ||
| 2523 | version·=·"*" | ||
| 2524 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2525 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2526 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2527 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2528 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2529 | package·--add=sudo | ||
| 2520 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2521 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2522 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2523 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2524 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2525 | -·name:·Ensure·sudo·is·installed | 2535 | -·name:·Ensure·sudo·is·installed |
| Max diff block lines reached; 112017/117833 bytes (95.06%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d30·3 | 00037d40:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21267, 974 lines modified | Offset 21267, 974 lines modified | ||
| 00053120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00053120:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00053130:·2223·6964·6d31·3634·3139·2220·7461·6269··"#idm16419"·tabi | 00053130:·2223·6964·6d31·3634·3139·2220·7461·6269··"#idm16419"·tabi | ||
| 00053140:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00053140:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00053150:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00053150:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00053160:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00053160:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00053170:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00053170:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | Diff chunk too large, falling back to line-by-line diff (455 lines added, 455 lines removed) | |
| 00053180:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00053180:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00053190:·223e·5265·6d65·6469·6174·696f·6e20·4 | 00053190:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 000531a0:· | 000531a0:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | ||
| 000531b0:· | 000531b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 000531c0:· | 000531c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 000531d0:· | 000531d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 000531e0:· | 000531e0:·3d22·6964·6d31·3634·3139·223e·3c74·6162··="idm16419"><tab | ||
| 000531f0:· | 000531f0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | ||
| 00053200:·6 | 00053200:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | ||
| 00053210:·6 | 00053210:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | ||
| 00053220:· | 00053220:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | ||
| 00053230:· | 00053230:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | ||
| 00053240:· | 00053240:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00053250:·6 | 00053250:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 00053260:· | 00053260:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | ||
| 00053270:· | 00053270:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | ||
| 00053280:· | 00053280:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | ||
| 00053290:· | 00053290:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 000532a0:·3 | 000532a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 000532b0:·6 | 000532b0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 000532c0:· | 000532c0:·3c74·643e·636f·6e66·6967·7572·653c·2f74··<td>configure</t | ||
| 000532d0:·3 | 000532d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 000532e0:·253 | 000532e0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 000532f0:·3 | 000532f0:·3a20·5072·6576·656e·7420·4c6f·6769·6e20··:·Prevent·Login· | ||
| 00053300:· | 00053300:·746f·2041·6363·6f75·6e74·7320·5769·7468··to·Accounts·With | ||
| 00053310:· | 00053310:·2045·6d70·7479·2050·6173·7377·6f72·6420···Empty·Password· | ||
| 00053320:· | 00053320:·2d20·4368·6563·6b20·6966·2073·7973·7465··-·Check·if·syste | ||
| 00053330:· | 00053330:·6d20·7265·6c69·6573·206f·6e0a·2020·2020··m·relies·on.···· | ||
| 00053340:· | 00053340:·6175·7468·7365·6c65·6374·0a20·2061·6e73··authselect.··ans | ||
| 00053350:· | 00053350:·6962·6c65·2e62·7569·6c74·696e·2e73·7461··ible.builtin.sta | ||
| 00053360:·7 | 00053360:·743a·0a20·2020·2070·6174·683a·202f·7573··t:.····path:·/us | ||
| 00053370:· | 00053370:·722f·6269·6e2f·6175·7468·7365·6c65·6374··r/bin/authselect | ||
| 00053380:· | 00053380:·0a20·2072·6567·6973·7465·723a·2072·6573··.··register:·res | ||
| 00053390:· | 00053390:·756c·745f·6175·7468·7365·6c65·6374·5f70··ult_authselect_p | ||
| 000533a0:· | 000533a0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | ||
| 000533b0:· | 000533b0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 000533c0:· | 000533c0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 000533d0:· | 000533d0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | ||
| 000533e0:· | 000533e0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | ||
| 000533f0:· | 000533f0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | ||
| 00053400:· | 00053400:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | ||
| 00053410:· | 00053410:·2043·4a49·532d·352e·352e·320a·2020·2d20···CJIS-5.5.2.··-· | ||
| 00053420:· | 00053420:·4449·5341·2d53·5449·472d·4f4c·3038·2d30··DISA-STIG-OL08-0 | ||
| 00053430:·3 | 00053430:·302d·3032·3033·3331·0a20·202d·2044·4953··0-020331.··-·DIS | ||
| 00053440:· | 00053440:·412d·5354·4947·2d4f·4c30·382d·3030·2d30··A-STIG-OL08-00-0 | ||
| 00053450:· | 00053450:·3230·3333·320a·2020·2d20·4e49·5354·2d38··20332.··-·NIST-8 | ||
| 00053460:·3 | 00053460:·3030·2d31·3731·2d33·2e31·2e31·0a20·202d··00-171-3.1.1.··- | ||
| 00053470:· | 00053470:·204e·4953·542d·3830·302d·3137·312d·332e···NIST-800-171-3. | ||
| 00053480:· | 00053480:·312e·350a·2020·2d20·4e49·5354·2d38·3030··1.5.··-·NIST-800 | ||
| 00053490:· | 00053490:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | ||
| 000534a0:· | 000534a0:·4e49·5354·2d38·3030·2d35·332d·4941·2d35··NIST-800-53-IA-5 | ||
| 000534b0:· | 000534b0:·2831·2928·6129·0a20·202d·204e·4953·542d··(1)(a).··-·NIST- | ||
| 000534c0:·3 | 000534c0:·3830·302d·3533·2d49·412d·3528·6329·0a20··800-53-IA-5(c).· | ||
| 000534d0:· | 000534d0:·202d·2050·4349·2d44·5353·2d52·6571·2d38···-·PCI-DSS-Req-8 | ||
| 000534e0:·2 | 000534e0:·2e32·2e33·0a20·202d·2050·4349·2d44·5353··.2.3.··-·PCI-DSS | ||
| 000534f0:· | 000534f0:·7634·2d38·2e33·2e31·0a20·202d·2063·6f6e··v4-8.3.1.··-·con | ||
| 00053500:· | 00053500:·6669·6775·7265·5f73·7472·6174·6567·790a··figure_strategy. | ||
| 00053510:·2 | 00053510:·2020·2d20·6869·6768·5f73·6576·6572·6974····-·high_severit | ||
| 00053520:· | 00053520:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | ||
| 00053530:· | 00053530:·7869·7479·0a20·202d·206d·6564·6975·6d5f··xity.··-·medium_ | ||
| 00053540:· | 00053540:·6469·7372·7570·7469·6f6e·0a20·202d·206e··disruption.··-·n | ||
| 00053550:· | 00053550:·6f5f·656d·7074·795f·7061·7373·776f·7264··o_empty_password | ||
| 00053560:· | 00053560:·730a·2020·2d20·6e6f·5f72·6562·6f6f·745f··s.··-·no_reboot_ | ||
| 00053570:·6 | 00053570:·6e65·6564·6564·0a0a·2d20·6e61·6d65·3a20··needed..-·name:· | ||
| 00053580:· | 00053580:·5072·6576·656e·7420·4c6f·6769·6e20·746f··Prevent·Login·to | ||
| 00053590:·2 | 00053590:·2041·6363·6f75·6e74·7320·5769·7468·2045···Accounts·With·E | ||
| 000535a0:· | 000535a0:·6d70·7479·2050·6173·7377·6f72·6420·2d20··mpty·Password·-· | ||
| 000535b0:· | 000535b0:·5265·6d65·6469·6174·6520·7573·696e·6720··Remediate·using· | ||
| 000535c0:· | 000535c0:·6175·7468·7365·6c65·6374·0a20·2062·6c6f··authselect.··blo | ||
| 000535d0:· | 000535d0:·636b·3a0a·0a20·202d·206e·616d·653a·2050··ck:..··-·name:·P | ||
| 000535e0:· | 000535e0:·7265·7665·6e74·204c·6f67·696e·2074·6f20··revent·Login·to· | ||
| 000535f0:· | 000535f0:·4163·636f·756e·7473·2057·6974·6820·456d··Accounts·With·Em | ||
| 00053600:· | 00053600:·7074·7920·5061·7373·776f·7264·202d·2043··pty·Password·-·C | ||
| 00053610:· | 00053610:·6865·636b·2069·6e74·6567·7269·7479·206f··heck·integrity·o | ||
| 00053620:· | 00053620:·6620·6175·7468·7365·6c65·6374·0a20·2020··f·authselect.··· | ||
| 00053630:· | 00053630:·2020·2063·7572·7265·6e74·2070·726f·6669·····current·profi | ||
| 00053640:· | 00053640:·6c65·0a20·2020·2061·6e73·6962·6c65·2e62··le.····ansible.b | ||
| 00053650:· | 00053650:·7569·6c74·696e·2e63·6f6d·6d61·6e64·3a0a··uiltin.command:. | ||
| 00053660:·2 | 00053660:·2020·2020·2020·636d·643a·2061·7574·6873········cmd:·auths | ||
| 00053670:·6 | 00053670:·656c·6563·7420·6368·6563·6b0a·2020·2020··elect·check.···· | ||
| 00053680:· | 00053680:·7265·6769·7374·6572·3a20·7265·7375·6c74··register:·result | ||
| 00053690:· | 00053690:·5f61·7574·6873·656c·6563·745f·6368·6563··_authselect_chec | ||
| 000536a0:· | 000536a0:·6b5f·636d·640a·2020·2020·6368·616e·6765··k_cmd.····change | ||
| 000536b0:· | 000536b0:·645f·7768·656e·3a20·6661·6c73·650a·2020··d_when:·false.·· | ||
| 000536c0:· | 000536c0:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | ||
| 000536d0:· | 000536d0:·616c·7365·0a0a·2020·2d20·6e61·6d65·3a20··alse..··-·name:· | ||
| 000536e0:· | 000536e0:·5072·6576·656e·7420·4c6f·6769·6e20·746f··Prevent·Login·to | ||
| 000536f0:· | 000536f0:·2041·6363·6f75·6e74·7320·5769·7468·2045···Accounts·With·E | ||
| 00053700:· | 00053700:·6d70·7479·2050·6173·7377·6f72·6420·2d20··mpty·Password·-· | ||
| 00053710:· | 00053710:·496e·666f·726d·6174·6976·6520·6d65·7373··Informative·mess | ||
| 00053720:·6 | 00053720:·6167·6520·6261·7365·640a·2020·2020·2020··age·based.······ | ||
| 00053730:· | 00053730:·6f6e·2074·6865·2061·7574·6873·656c·6563··on·the·authselec | ||
| 00053740:· | 00053740:·7420·696e·7465·6772·6974·7920·6368·6563··t·integrity·chec | ||
| 00053750:· | 00053750:·6b20·7265·7375·6c74·0a20·2020·2061·6e73··k·result.····ans | ||
| 00053760:· | 00053760:·6962·6c65·2e62·7569·6c74·696e·2e61·7373··ible.builtin.ass | ||
| 00053770:· | 00053770:·6572·743a·0a20·2020·2020·2074·6861·743a··ert:.······that: | ||
| 00053780:· | 00053780:·0a20·2020·2020·202d·2072·6573·756c·745f··.······-·result_ | ||
| 00053790:·61 | 00053790:·6175·7468·7365·6c65·6374·5f63·6865·636b··authselect_check | ||
| 000537a0:· | 000537a0:·5f63·6d64·2e72·6320·3d3d·2030·0a20·2020··_cmd.rc·==·0.··· | ||
| 000537b0:· | 000537b0:·2020·2066·6169·6c5f·6d73·673a·0a20·2020·····fail_msg:.··· | ||
| 000537c0:· | 000537c0:·2020·202d·2061·7574·6873·656c·6563·7420·····-·authselect· | ||
| 000537d0:· | 000537d0:·696e·7465·6772·6974·7920·6368·6563·6b20··integrity·check· | ||
| 000537e0:· | 000537e0:·6661·696c·6564·2e20·5265·6d65·6469·6174··failed.·Remediat | ||
| Max diff block lines reached; 430950/495588 bytes (86.96%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·8 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:8 | 42 | ····*·cpe:/o:oracle:linux:8 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1132, 38 lines modified | Offset 1132, 14 lines modified | ||
| 1132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1132 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1133 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1133 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1134 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1135 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1136 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 | 1136 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-020331,·OL08-00-020332 |
| 1137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1137 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule | 1138 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248715r991589_rule,·SV-248716r991589_rule |
| 1139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1140 | --- | ||
| 1141 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1142 | kind:·MachineConfig | ||
| 1143 | spec: | ||
| 1144 | ··config: | ||
| 1145 | ····ignition: | ||
| 1146 | ······version:·3.1.0 | ||
| 1147 | ····storage: | ||
| 1148 | ······files: | ||
| 1149 | ······-·contents: | ||
| 1150 | ··········source: | ||
| 1151 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1152 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1153 | ········mode:·0644 | ||
| 1154 | ········path:·/etc/pam.d/password-auth | ||
| 1155 | ········overwrite:·true | ||
| 1156 | ······-·contents: | ||
| 1157 | ··········source: | ||
| 1158 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1159 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1160 | ········mode:·0644 | ||
| 1161 | ········path:·/etc/pam.d/system-auth | ||
| 1162 | ········overwrite:·true | ||
| 1163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1168 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1144 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1169 | ····authselect | 1145 | ····authselect |
| Offset 1327, 14 lines modified | Offset 1303, 38 lines modified | ||
| 1327 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1303 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1328 | fi | 1304 | fi |
| 1329 | fi | 1305 | fi |
| 1330 | else | 1306 | else |
| 1331 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1307 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1332 | fi | 1308 | fi |
| 1309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1310 | --- | ||
| 1311 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1312 | kind:·MachineConfig | ||
| 1313 | spec: | ||
| 1314 | ··config: | ||
| 1315 | ····ignition: | ||
| 1316 | ······version:·3.1.0 | ||
| 1317 | ····storage: | ||
| 1318 | ······files: | ||
| 1319 | ······-·contents: | ||
| 1320 | ··········source: | ||
| 1321 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1322 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1323 | ········mode:·0644 | ||
| 1324 | ········path:·/etc/pam.d/password-auth | ||
| 1325 | ········overwrite:·true | ||
| 1326 | ······-·contents: | ||
| 1327 | ··········source: | ||
| 1328 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1329 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1330 | ········mode:·0644 | ||
| 1331 | ········path:·/etc/pam.d/system-auth | ||
| 1332 | ········overwrite:·true | ||
| 1333 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1333 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1334 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1334 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1335 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1335 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1336 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1336 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1337 | #·echo·$PATH | 1337 | #·echo·$PATH |
| 1338 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1338 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1432, 14 lines modified | Offset 1432, 26 lines modified | ||
| 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1432 | References:·_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1433 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1434 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1435 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1436 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 | 1437 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-030670 |
| 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule | 1438 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-248812r991589_rule |
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1440 | [[packages]] | ||
| 1441 | name·=·"rsyslog" | ||
| 1442 | version·=·"*" | ||
| 1443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1448 | package·--add=rsyslog | ||
| 1439 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1440 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1441 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1442 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1443 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1444 | -·name:·Ensure·rsyslog·is·installed | 1454 | -·name:·Ensure·rsyslog·is·installed |
| 1445 | ··package: | 1455 | ··package: |
| Offset 1451, 31 lines modified | Offset 1463, 14 lines modified | ||
| 1451 | ··-·NIST-800-53-CM-6(a) | 1463 | ··-·NIST-800-53-CM-6(a) |
| 1452 | ··-·enable_strategy | 1464 | ··-·enable_strategy |
| 1453 | ··-·low_complexity | 1465 | ··-·low_complexity |
| 1454 | ··-·low_disruption | 1466 | ··-·low_disruption |
| 1455 | ··-·medium_severity | 1467 | ··-·medium_severity |
| 1456 | ··-·no_reboot_needed | 1468 | ··-·no_reboot_needed |
| Max diff block lines reached; 36395/58230 bytes (62.50%) of diff not shown. | |||
| Offset 14278, 16 lines modified | Offset 14278, 16 lines modified | ||
| 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037c50:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037c60:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037c70:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037c80:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037c90:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037ca0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037cb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037cc0:·2020·2861·7320·6f66·2032·3032·3 | 00037cc0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037cd0:·2d32·3 | 00037cd0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037ce0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037cf0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037d00:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037d10:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037d20:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037d30:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037d40:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 15076, 203 lines modified | Offset 15076, 203 lines modified | ||
| 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003ae30:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | 0003ae40:·2223·6964·6d35·3638·3422·2074·6162·696e··"#idm5684"·tabin | ||
| 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003ae50:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003ae60:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003ae70:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003ae80:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003ae90:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003aea0:·3e52·656d·6564·6961·7469·6f6e·204 | 0003aea0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003aeb0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003aec0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003aed0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003aee0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003aef0:·2269·646d·3536·3834·223e·3c74·6162·6c65··"idm5684"><table | |||
| 0003af00:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003af10:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003af20:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003af30:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003af40:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003af50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003af60:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003a | 0003aeb0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003aec0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aed0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003aee0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003aef0:·6c61·7073·6522·2069·643d·2269·646d·3536··lapse"·id="idm56 | |||
| 0003af00:·3834·223e·3c70·7265·3e3c·636f·6465·3e0a··84"><pre><code>. | |||
| 0003af10:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003af20:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003af30:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003af40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003af50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003af60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003af70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003af80:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | |||
| 0003af90:·3638·3522·2074·6162·696e·6465·783d·2230··685"·tabindex="0 | |||
| 0003afa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003afb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003afc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003afd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003afe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003aff0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003b000:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b010:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b020:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b030:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b040:·3638·3522·3e3c·7461·626c·6520·636c·6173··685"><table·clas | |||
| 0003b050:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b060:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b070:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b080:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b090:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003 | 0003b0a0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003af90:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003 | 0003b0b0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 0003b0c0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003 | 0003b0d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b0e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b0f0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b100:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b110:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003afc0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003afd0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003afe0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003aff0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003b000:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003b010:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003b020:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003b030:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003b040:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003b050:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003b060:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003b070:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003b080:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003b090:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003b0a0:·7461·6773·3a0a·2020·2d20·434a·4953·2d35··tags:.··-·CJIS-5 | |||
| 0003b0b0:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003b0c0:·2d53·5449·472d·4f4c·3038·2d30·302d·3031··-STIG-OL08-00-01 | |||
| 0003b0d0:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| 0003b0e0:·302d·3533·2d43·4d2d·3628·6129·0a20·202d··0-53-CM-6(a).··- | |||
| 0003b0f0:·2050·4349·2d44·5353·2d52·6571·2d31·312e···PCI-DSS-Req-11. | |||
| 0003b100:·350a·2020·2d20·5043·492d·4453·5376·342d··5.··-·PCI-DSSv4- | |||
| 0003b110:·3131·2e35·2e32·0a20·202d·2065·6e61·626c··11.5.2.··-·enabl | |||
| 0003b120:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0003b130:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0003b140:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0003b150:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0003b160:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0003b170:·6f74·5f6e·6565·6465·640a·2020·2d20·7061··ot_needed.··-·pa | |||
| 0003b180:·636b·6167·655f·6169·6465·5f69·6e73·7461··ckage_aide_insta | |||
| 0003b190:·6c6c·6564·0a3c·2f63·6f64·653e·3c2f·7072··lled.</code></pr | |||
| 0003b1a0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b1b0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b1c0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b1d0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b1e0:·6172·6765·743d·2223·6964·6d35·3638·3522··arget="#idm5685" | |||
| 0003b1f0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b200:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b210:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b220:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b230:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b240:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b250:·6f6e·2050·7570·7065·7420·736e·6970·7065··on·Puppet·snippe | |||
| 0003b260:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b270:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b280:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b290:·2220·6964·3d22·6964·6d35·3638·3522·3e3c··"·id="idm5685">< | |||
| 0003b2a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b2b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b2c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b2d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| Max diff block lines reached; 2358963/2386893 bytes (98.83%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Oracle·Linux·8 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:8 | 41 | ····*·cpe:/o:oracle:linux:8 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 100, 14 lines modified | Offset 100, 26 lines modified | ||
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 103 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 104 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 106 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | [[packages]] | ||
| 109 | name·=·"aide" | ||
| 110 | version·=·"*" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·--add=aide | ||
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 112 | -·name:·Ensure·aide·is·installed | 122 | -·name:·Ensure·aide·is·installed |
| 113 | ··package: | 123 | ··package: |
| Offset 122, 31 lines modified | Offset 134, 14 lines modified | ||
| 122 | ··-·PCI-DSSv4-11.5.2 | 134 | ··-·PCI-DSSv4-11.5.2 |
| 123 | ··-·enable_strategy | 135 | ··-·enable_strategy |
| 124 | ··-·low_complexity | 136 | ··-·low_complexity |
| 125 | ··-·low_disruption | 137 | ··-·low_disruption |
| 126 | ··-·medium_severity | 138 | ··-·medium_severity |
| 127 | ··-·no_reboot_needed | 139 | ··-·no_reboot_needed |
| 128 | ··-·package_aide_installed | 140 | ··-·package_aide_installed |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | include·install_aide | ||
| 135 | class·install_aide·{ | ||
| 136 | ··package·{·'aide': | ||
| 137 | ····ensure·=>·'installed', | ||
| 138 | ··} | ||
| 139 | } | ||
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | [[packages]] | ||
| 142 | name·=·"aide" | ||
| 143 | version·=·"*" | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 149 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 150 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 154, 21 lines modified | Offset 149, 26 lines modified | ||
| 154 | if·!·rpm·-q·--quiet·"aide"·;·then | 149 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 155 | ····yum·install·-y·"aide" | 150 | ····yum·install·-y·"aide" |
| 156 | fi | 151 | fi |
| 157 | else | 152 | else |
| 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 153 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 159 | fi | 154 | fi |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | include·install_aide | ||
| 165 | 161 | class·install_aide·{ | |
| 162 | ··package·{·'aide': | ||
| 163 | ····ensure·=>·'installed', | ||
| 164 | ··} | ||
| 165 | } | ||
| 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 167 | Run·the·following·command·to·generate·a·new·database: | 167 | Run·the·following·command·to·generate·a·new·database: |
| 168 | $·sudo·/usr/sbin/aide·--init | 168 | $·sudo·/usr/sbin/aide·--init |
| 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 170 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 170 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 171 | To·initiate·a·manual·check,·run·the·following·command: | 171 | To·initiate·a·manual·check,·run·the·following·command: |
| 172 | $·sudo·/usr/sbin/aide·--check | 172 | $·sudo·/usr/sbin/aide·--check |
| Offset 1683, 14 lines modified | Offset 1683, 18 lines modified | ||
| 1683 | ············_\x8i_\x8s_\x8m······1446 | 1683 | ············_\x8i_\x8s_\x8m······1446 |
| 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1684 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1685 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1686 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1687 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1688 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1689 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1691 | [customizations] | ||
| 1692 | fips·=·true | ||
| 1690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1693 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1691 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1694 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1692 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1695 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1693 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1696 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1694 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1697 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1695 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1698 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1696 | ··set_fact: | 1699 | ··set_fact: |
| Offset 1790, 18 lines modified | Offset 1794, 14 lines modified | ||
| 1790 | ··-·NIST-800-53-SC-13 | 1794 | ··-·NIST-800-53-SC-13 |
| 1791 | ··-·enable_fips_mode | 1795 | ··-·enable_fips_mode |
| 1792 | ··-·high_severity | 1796 | ··-·high_severity |
| 1793 | ··-·medium_complexity | 1797 | ··-·medium_complexity |
| 1794 | ··-·medium_disruption | 1798 | ··-·medium_disruption |
| 1795 | ··-·reboot_required | 1799 | ··-·reboot_required |
| Max diff block lines reached; 225440/231368 bytes (97.44%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dd0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037de0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037df0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e00:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e10:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e20:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e30:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e40:·3032·3 | 00037e40:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e50:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e60:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e70:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e80:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e90:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ea0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037eb0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 15095, 202 lines modified | Offset 15095, 202 lines modified | ||
| 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | 0003af60:·6574·3d22·2369·646d·3536·3834·2220·7461··et="#idm5684"·ta | ||
| 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003afa0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003afb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003afc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003afd0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003afe0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003aff0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b000:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b010:·6964·3d22·6964·6d35·3638·3422·3e3c·7461··id="idm5684"><ta | |||
| 0003b020:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b030:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b040:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b050:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b060:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b070:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b080:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003 | 0003afd0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003afe0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003aff0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b000:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b010:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b020:·6d35·3638·3422·3e3c·7072·653e·3c63·6f64··m5684"><pre><cod | |||
| 0003b030:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003b040:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003b050:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b060:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b070:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b080:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b090:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b0a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b0b0:·646d·3536·3835·2220·7461·6269·6e64·6578··dm5685"·tabindex | |||
| 0003b0c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b0d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b0e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b0f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b100:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b110:·6d65·6469·6174·696f·6e20·416e·6163·6f6e··mediation·Anacon | |||
| 0003b120:·6461·2073·6e69·7070·6574·20e2·87b2·3c2f··da·snippet·...</ | |||
| 0003b130:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b140:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b150:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b160:·646d·3536·3835·223e·3c74·6162·6c65·2063··dm5685"><table·c | |||
| 0003b170:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b180:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b190:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b1a0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b1b0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b | 0003b1c0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b0b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b | 0003b1d0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b1e0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b | 0003b1f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b200:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b210:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b220:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b230:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b0e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b0f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b100:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b110:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b120:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b130:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b140:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b150:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b160:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b170:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b180:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b190:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b1a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b1b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b1c0:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b1d0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b1e0:·4953·412d·5354·4947·2d4f·4c30·382d·3030··ISA-STIG-OL08-00 | |||
| 0003b1f0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003b200:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b210:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b220:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b230:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b240:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b250:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b260:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b270:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b280:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b290:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b2a0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b2b0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b2c0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b2d0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b2e0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b2f0:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b300:·612d·7461·7267·6574·3d22·2369·646d·3536··a-target="#idm56 | |||
| 0003b310:·3835·2220·7461·6269·6e64·6578·3d22·3022··85"·tabindex="0" | |||
| 0003b320:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b330:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b340:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b350:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b360:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b370:·6174·696f·6e20·5075·7070·6574·2073·6e69··ation·Puppet·sni | |||
| 0003b380:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b390:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3a0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3b0:·7073·6522·2069·643d·2269·646d·3536·3835··pse"·id="idm5685 | |||
| 0003b3c0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3d0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3e0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3f0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b400:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b410:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| Max diff block lines reached; 2340163/2367817 bytes (98.83%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Oracle·Linux·8 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:8 | 46 | ····*·cpe:/o:oracle:linux:8 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 104, 14 lines modified | Offset 104, 26 lines modified | ||
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 | 107 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········OL08-00-010359 |
| 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule | 110 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-252654r958944_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package·--add=aide | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | -·name:·Ensure·aide·is·installed | 126 | -·name:·Ensure·aide·is·installed |
| 117 | ··package: | 127 | ··package: |
| Offset 126, 31 lines modified | Offset 138, 14 lines modified | ||
| 126 | ··-·PCI-DSSv4-11.5.2 | 138 | ··-·PCI-DSSv4-11.5.2 |
| 127 | ··-·enable_strategy | 139 | ··-·enable_strategy |
| 128 | ··-·low_complexity | 140 | ··-·low_complexity |
| 129 | ··-·low_disruption | 141 | ··-·low_disruption |
| 130 | ··-·medium_severity | 142 | ··-·medium_severity |
| 131 | ··-·no_reboot_needed | 143 | ··-·no_reboot_needed |
| 132 | ··-·package_aide_installed | 144 | ··-·package_aide_installed |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 153 | #·Remediation·is·applicable·only·in·certain·platforms | 150 | #·Remediation·is·applicable·only·in·certain·platforms |
| 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 158, 21 lines modified | Offset 153, 26 lines modified | ||
| 158 | if·!·rpm·-q·--quiet·"aide"·;·then | 153 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 159 | ····yum·install·-y·"aide" | 154 | ····yum·install·-y·"aide" |
| 160 | fi | 155 | fi |
| 161 | else | 156 | else |
| 162 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 163 | fi | 158 | fi |
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | include·install_aide | ||
| 169 | 165 | class·install_aide·{ | |
| 166 | ··package·{·'aide': | ||
| 167 | ····ensure·=>·'installed', | ||
| 168 | ··} | ||
| 169 | } | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | Run·the·following·command·to·generate·a·new·database: | 171 | Run·the·following·command·to·generate·a·new·database: |
| 172 | $·sudo·/usr/sbin/aide·--init | 172 | $·sudo·/usr/sbin/aide·--init |
| 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 174 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 174 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 175 | To·initiate·a·manual·check,·run·the·following·command: | 175 | To·initiate·a·manual·check,·run·the·following·command: |
| 176 | $·sudo·/usr/sbin/aide·--check | 176 | $·sudo·/usr/sbin/aide·--check |
| Offset 1687, 14 lines modified | Offset 1687, 18 lines modified | ||
| 1687 | ············_\x8i_\x8s_\x8m······1446 | 1687 | ············_\x8i_\x8s_\x8m······1446 |
| 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1688 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1689 | References:·_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1690 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1691 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 | 1692 | ············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···OL08-00-010020 |
| 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule | 1693 | ············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-248524r958408_rule |
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1695 | [customizations] | ||
| 1696 | fips·=·true | ||
| 1694 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1695 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1696 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1697 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1698 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1699 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1702 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1700 | ··set_fact: | 1703 | ··set_fact: |
| Offset 1794, 18 lines modified | Offset 1798, 14 lines modified | ||
| 1794 | ··-·NIST-800-53-SC-13 | 1798 | ··-·NIST-800-53-SC-13 |
| 1795 | ··-·enable_fips_mode | 1799 | ··-·enable_fips_mode |
| 1796 | ··-·high_severity | 1800 | ··-·high_severity |
| 1797 | ··-·medium_complexity | 1801 | ··-·medium_complexity |
| 1798 | ··-·medium_disruption | 1802 | ··-·medium_disruption |
| 1799 | ··-·reboot_required | 1803 | ··-·reboot_required |
| Max diff block lines reached; 223173/229114 bytes (97.41%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dd0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037de0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037df0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e00:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e10:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e20:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e40:·6173·206f·6620·3230·323 | 00037e40:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e50:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e60:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e70:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e80:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e90:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037ea0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037eb0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15037, 200 lines modified | Offset 15037, 200 lines modified | ||
| 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | 0003abc0:·6172·6765·743d·2223·6964·6d35·3232·3222··arget="#idm5222" | ||
| 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003abd0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003abe0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003abf0:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003ac00:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003ac10:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003ac20:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003ac30:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | |||
| 0003ac40:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003ac50:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003ac60:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003ac70:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003ac80:·2269·646d·3532·3232·223e·3c70·7265·3e3c··"idm5222"><pre>< | |||
| 0003ac90:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003aca0:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003acb0:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003acc0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003acd0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003ace0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003acf0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003ad00:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003ad10:·2223·6964·6d35·3232·3322·2074·6162·696e··"#idm5223"·tabin | |||
| 0003ad20:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003ad30:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003ad40:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003ad50:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003ad60:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003ad70:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003ad80:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003ad90:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ada0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003adb0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003adc0:·3d22·6964·6d35·3232·3322·3e3c·7461·626c··="idm5223"><tabl | |||
| 0003add0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003ade0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003adf0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003ae00:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003ae10:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003ae20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae30:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003ae40:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003ae50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003ae60:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003ae70:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003ae80:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003ae90:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003aea0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003aeb0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003aec0:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003aed0:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003aee0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003aef0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003af00:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003af10:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003af20:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | |||
| 0003af30:·3422·2074·6162·696e·6465·783d·2230·2220··4"·tabindex="0"· | |||
| 0003af40:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003af50:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003af60:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003af70:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003af80:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003a | 0003af90:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | ||
| 0003a | 0003afa0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003a | 0003afb0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003ac6 | 0003afc0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003a | 0003afd0:·7073·6522·2069·643d·2269·646d·3532·3234··pse"·id="idm5224 | ||
| 0003a | 0003afe0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0003a | 0003aff0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0003 | 0003b000:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0003 | 0003b010:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0003 | 0003b020:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0003 | 0003b030:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0003 | 0003b040:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003 | 0003b050:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003 | 0003b060:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003 | 0003b070:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003 | 0003b080:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 0003 | 0003b090:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003 | 0003b0a0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003 | 0003b0b0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | ||
| 0003 | 0003b0c0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | ||
| 0003 | 0003b0d0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | ||
| 0003 | 0003b0e0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | ||
| 0003 | 0003b0f0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | ||
| 0003 | 0003b100:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | ||
| 0003 | 0003b110:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | ||
| 0003 | 0003b120:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | ||
| 0003 | 0003b130:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | ||
| 0003 | 0003b140:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | ||
| 0003 | 0003b150:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | ||
| 0003 | 0003b160:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | ||
| 0003 | 0003b170:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | ||
| 0003 | 0003b180:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | ||
| 0003 | 0003b190:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | ||
| 0003a | 0003b1a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003 | 0003b1b0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | ||
| 0003 | 0003b1c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | ||
| 0003 | 0003b1d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | ||
| 0003 | 0003b1e0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | ||
| 0003 | 0003b1f0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | ||
| 0003 | 0003b200:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | ||
| 0003 | 0003b210:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | ||
| 0003 | 0003b220:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | ||
| 0003 | 0003b230:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | ||
| 0003 | 0003b240:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | ||
| 0003 | 0003b250:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | ||
| 0003 | 0003b260:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003 | 0003b270:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003 | 0003b280:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003 | 0003b290:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003a | 0003b2a0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| Max diff block lines reached; 1462912/1490290 bytes (98.16%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 113, 14 lines modified | Offset 113, 26 lines modified | ||
| 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 113 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 114 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 115 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 129 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 135 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 136 | ··package: |
| Offset 134, 31 lines modified | Offset 146, 14 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 148 | ··-·low_complexity |
| 137 | ··-·low_disruption | 149 | ··-·low_disruption |
| 138 | ··-·medium_severity | 150 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 161, 26 lines modified | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | 161 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 167 | ····yum·install·-y·"aide" | 162 | ····yum·install·-y·"aide" |
| 168 | fi | 163 | fi |
| 169 | else | 164 | else |
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171 | fi | 166 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | ||
| 177 | 173 | class·install_aide·{ | |
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 469, 14 lines modified | Offset 469, 21 lines modified | ||
| 469 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 469 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 470 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 470 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 471 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 471 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 472 | ············/tmp·directory·is·wiped·during·reboot. | 472 | ············/tmp·directory·is·wiped·during·reboot. |
| 473 | Severity: ··low | 473 | Severity: ··low |
| 474 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 474 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 475 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 475 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 481 | services·--enabled=tmp.mount | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 481 | -·name:·Enable·mount·tmp | 487 | -·name:·Enable·mount·tmp |
| 482 | ··ansible.builtin.systemd: | 488 | ··ansible.builtin.systemd: |
| Offset 504, 21 lines modified | Offset 511, 14 lines modified | ||
| 504 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 511 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 505 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 512 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 506 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 513 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 110832/116569 bytes (95.08%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037dc0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037dd0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037de0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037df0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e00:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e10:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e20:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e30:·6173·206f·6620·3230·323 | 00037e30:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e40:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e50:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e60:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e70:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e80:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e90:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ea0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15042, 201 lines modified | Offset 15042, 201 lines modified | ||
| 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ac10:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ac20:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ac30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ac40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ac50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ac60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ac70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ac80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003ac90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003aca0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003acb0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003acc0:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 0003acd0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003ace0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003acf0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003ad00:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003ad10:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003ad20:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003ad30:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a | 0003ac80:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003ac90:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003aca0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003acb0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003acc0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003acd0:·6964·3d22·6964·6d35·3232·3222·3e3c·7072··id="idm5222"><pr | |||
| 0003ace0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003acf0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003ad00:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003ad10:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003ad20:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003ad30:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003ad40:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003ad50:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003ad60:·6574·3d22·2369·646d·3532·3233·2220·7461··et="#idm5223"·ta | |||
| 0003ad70:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003ad80:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003ad90:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003ada0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003adb0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003adc0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003add0:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0003ade0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003adf0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003ae00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003ae10:·2069·643d·2269·646d·3532·3233·223e·3c74···id="idm5223"><t | |||
| 0003ae20:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003ae30:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003ae40:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003ae50:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003ae60:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003a | 0003ae70:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003ae80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003ae90:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003aea0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003aeb0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003aec0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003a | 0003aed0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003aee0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aef0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003af00:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003af10:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0003af20:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 0003af30:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003af40:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003af50:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003af60:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003af70:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003af80:·3532·3234·2220·7461·6269·6e64·6578·3d22··5224"·tabindex=" | |||
| 0003af90:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003afa0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003afb0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003afc0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003afd0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003afe0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0003aff0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b000:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b010:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b020:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b030:·3232·3422·3e3c·7461·626c·6520·636c·6173··224"><table·clas | |||
| 0003b040:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b050:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b060:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b070:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b080:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b090:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b0b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b0c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003 | 0003b0d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003 | 0003b0e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0003 | 0003b0f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0003 | 0003b100:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0003 | 0003b110:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0003 | 0003b120:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0003 | 0003b130:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | ||
| 0003 | 0003b140:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | ||
| 0003 | 0003b150:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | ||
| 0003 | 0003b160:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | ||
| 0003 | 0003b170:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | ||
| 0003 | 0003b180:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | ||
| 0003 | 0003b190:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 0003 | 0003b1a0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 0003 | 0003b1b0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 0003 | 0003b1c0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 0003 | 0003b1d0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 0003 | 0003b1e0:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | ||
| 0003 | 0003b1f0:·2e33·0a20·202d·204e·4953·542d·3830·302d··.3.··-·NIST-800- | ||
| 0003 | 0003b200:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | ||
| 0003 | 0003b210:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | ||
| 0003 | 0003b220:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | ||
| 0003 | 0003b230:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | ||
| Max diff block lines reached; 1541800/1569316 bytes (98.25%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 55 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 114, 14 lines modified | Offset 114, 26 lines modified | ||
| 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 114 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 115 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 116 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 137 | ··package: |
| Offset 135, 31 lines modified | Offset 147, 14 lines modified | ||
| 135 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 136 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 137 | ··-·low_complexity | 149 | ··-·low_complexity |
| 138 | ··-·low_disruption | 150 | ··-·low_disruption |
| 139 | ··-·medium_severity | 151 | ··-·medium_severity |
| 140 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 141 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | include·install_aide | ||
| 148 | class·install_aide·{ | ||
| 149 | ··package·{·'aide': | ||
| 150 | ····ensure·=>·'installed', | ||
| 151 | ··} | ||
| 152 | } | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | [[packages]] | ||
| 155 | name·=·"aide" | ||
| 156 | version·=·"*" | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 162, 26 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 162 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····yum·install·-y·"aide" | 163 | ····yum·install·-y·"aide" |
| 169 | fi | 164 | fi |
| 170 | else | 165 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 167 | fi |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 980, 14 lines modified | Offset 980, 21 lines modified | ||
| 980 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 980 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 981 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 981 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 982 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 982 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 983 | ············/tmp·directory·is·wiped·during·reboot. | 983 | ············/tmp·directory·is·wiped·during·reboot. |
| 984 | Severity: ··low | 984 | Severity: ··low |
| 985 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 985 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 986 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 986 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 992 | services·--enabled=tmp.mount | ||
| 987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 993 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 994 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 995 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 996 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 997 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 992 | -·name:·Enable·mount·tmp | 998 | -·name:·Enable·mount·tmp |
| 993 | ··ansible.builtin.systemd: | 999 | ··ansible.builtin.systemd: |
| Offset 1015, 21 lines modified | Offset 1022, 14 lines modified | ||
| 1015 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 1022 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 1016 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 1023 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 1017 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 1024 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 119805/125548 bytes (95.43%) of diff not shown. | |||
| Offset 14303, 15 lines modified | Offset 14303, 15 lines modified | ||
| 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037de0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037df0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037e00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037e10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037e20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037e30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037e50:·6173·206f·6620·3230·323 | 00037e50:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037ea0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037eb0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037ec0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15028, 200 lines modified | Offset 15028, 200 lines modified | ||
| 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | 0003ab30:·7461·7267·6574·3d22·2369·646d·3532·3232··target="#idm5222 | ||
| 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003ab40:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003ab50:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ab60:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ab70:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ab80:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ab90:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aba0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003abb0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003abc0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003abd0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003abe0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003abf0:·3d22·6964·6d35·3232·3222·3e3c·7072·653e··="idm5222"><pre> | |||
| 0003ac00:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003ac10:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003ac20:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003ac30:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ac40:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003ac50:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003ac60:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003ac70:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003ac80:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003ac90:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003aca0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003acb0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003acc0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003acd0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003ace0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003acf0:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003ad00:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003ad10:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003ad20:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003ad30:·643d·2269·646d·3532·3233·223e·3c74·6162··d="idm5223"><tab | |||
| 0003ad40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003ad50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003ad60:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003ad70:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003ad80:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003ad90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003ada0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003adb0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003adc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003add0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003ade0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003adf0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003ae00:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003ae10:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003ae20:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003ae30:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003ae40:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003ae50:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003ae60:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003ae70:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003ae80:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003ae90:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | |||
| 0003aea0:·3234·2220·7461·6269·6e64·6578·3d22·3022··24"·tabindex="0" | |||
| 0003aeb0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003aec0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003aed0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003aee0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003aef0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003a | 0003af00:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003a | 0003af10:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003a | 0003af20:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003a | 0003af30:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003a | 0003af40:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | ||
| 0003a | 0003af50:·3422·3e3c·7461·626c·6520·636c·6173·733d··4"><table·class= | ||
| 0003a | 0003af60:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003a | 0003af70:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003a | 0003af80:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003a | 0003af90:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003a | 0003afa0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003a | 0003afb0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003a | 0003afc0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003a | 0003afd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003a | 0003afe0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003a | 0003aff0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003 | 0003b000:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 0003 | 0003b010:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 0003 | 0003b020:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | ||
| 0003 | 0003b030:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 0003 | 0003b040:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0003 | 0003b050:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | ||
| 0003 | 0003b060:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | ||
| 0003 | 0003b070:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | ||
| 0003 | 0003b080:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | ||
| 0003 | 0003b090:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | ||
| 0003a | 0003b0a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | ||
| 0003 | 0003b0b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | ||
| 0003 | 0003b0c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | ||
| 0003 | 0003b0d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | ||
| 0003 | 0003b0e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | ||
| 0003 | 0003b0f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | ||
| 0003 | 0003b100:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | ||
| 0003 | 0003b110:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 0003 | 0003b120:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | ||
| 0003 | 0003b130:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | ||
| 0003 | 0003b140:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | ||
| 0003 | 0003b150:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | ||
| 0003 | 0003b160:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | ||
| 0003 | 0003b170:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | ||
| 0003 | 0003b180:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | ||
| 0003 | 0003b190:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | ||
| 0003a | 0003b1a0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | ||
| 0003 | 0003b1b0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | ||
| 0003 | 0003b1c0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | ||
| 0003 | 0003b1d0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 0003 | 0003b1e0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 0003 | 0003b1f0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 0003 | 0003b200:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 0003 | 0003b210:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| Max diff block lines reached; 1307464/1334842 bytes (97.95%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 111, 14 lines modified | Offset 111, 26 lines modified | ||
| 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 111 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 112 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 113 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 117 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 134 | ··package: |
| Offset 132, 31 lines modified | Offset 144, 14 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 146 | ··-·low_complexity |
| 135 | ··-·low_disruption | 147 | ··-·low_disruption |
| 136 | ··-·medium_severity | 148 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | include·install_aide | ||
| 145 | class·install_aide·{ | ||
| 146 | ··package·{·'aide': | ||
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 159, 26 lines modified | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | 159 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 165 | ····yum·install·-y·"aide" | 160 | ····yum·install·-y·"aide" |
| 166 | fi | 161 | fi |
| 167 | else | 162 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 164 | fi |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_aide | ||
| 175 | 171 | class·install_aide·{ | |
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 180 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 181 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 434, 14 lines modified | Offset 434, 21 lines modified | ||
| 434 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs | 434 | ············The·/tmp·directory·is·used·as·temporary·storage·by·many·programs.·Placing·/tmp·in·a·tmpfs |
| 435 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect | 435 | Rationale:··filesystem·enables·the·setting·of·more·restrictive·mount·options,·which·can·help·protect |
| 436 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the | 436 | ············programs·which·use·it.·The·tmp.mount·unit·configures·the·tmpfs·filesystem·and·ensures·the |
| 437 | ············/tmp·directory·is·wiped·during·reboot. | 437 | ············/tmp·directory·is·wiped·during·reboot. |
| 438 | Severity: ··low | 438 | Severity: ··low |
| 439 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled | 439 | Rule·ID:····xccdf_org.ssgproject.content_rule_systemd_tmp_mount_enabled |
| 440 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 | 440 | References:·_\x8a_\x8n_\x8s_\x8s_\x8i·R28 |
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 446 | services·--enabled=tmp.mount | ||
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 446 | -·name:·Enable·mount·tmp | 452 | -·name:·Enable·mount·tmp |
| 447 | ··ansible.builtin.systemd: | 453 | ··ansible.builtin.systemd: |
| Offset 469, 21 lines modified | Offset 476, 14 lines modified | ||
| 469 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' | 476 | "$SYSTEMCTL_EXEC"·unmask·'tmp.mount' |
| 470 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' | 477 | "$SYSTEMCTL_EXEC"·start·'tmp.mount' |
| 471 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' | 478 | "$SYSTEMCTL_EXEC"·enable·'tmp.mount' |
| Max diff block lines reached; 90088/95944 bytes (93.90%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dd0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037de0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037df0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037e00:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e10:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e20:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e30:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e40:·6620·3230·323 | 00037e40:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e50:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e60:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e70:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e80:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e90:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037ea0:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037eb0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 14718, 182 lines modified | Offset 14718, 182 lines modified | ||
| 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | 000397d0:·6574·3d22·2369·646d·3834·3339·2220·7461··et="#idm8439"·ta | ||
| 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 000397e0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 000397f0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 00039800:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 00039810:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 00039820:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 00039830:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039840:·4 | 00039840:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 00039850:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 00039860:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039870:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039880:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039890:·6d38·3433·3922·3e3c·7072·653e·3c63·6f64··m8439"><pre><cod | |||
| 000398a0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 000398b0:·6e61·6d65·203d·2022·646e·662d·6175·746f··name·=·"dnf-auto | |||
| 000398c0:·6d61·7469·6322·0a76·6572·7369·6f6e·203d··matic".version·= | |||
| 000398d0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 000398e0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 000398f0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00039900:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00039910:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00039920:·6172·6765·743d·2223·6964·6d38·3434·3022··arget="#idm8440" | |||
| 00039930:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00039940:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00039950:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 00039960:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 00039970:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 00039980:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00039990:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 00039 | 000399a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 00039860:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00039870:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00039880:·6964·3d22·6964·6d38·3433·3922·3e3c·7461··id="idm8439"><ta | |||
| 00039 | 000399b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 000399c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000399d0:·7365·2220·6964·3d22·6964·6d38·3434·3022··se"·id="idm8440" | |||
| 000399e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039 | 000399f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 00039 | 00039a00:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00039a10:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039a20:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039a30:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039a40:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039a50:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039a60:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039a70:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039a80:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039a90:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039aa0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039ab0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039ac0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039ad0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 00039ae0:·6520·2d2d·6164·643d·646e·662d·6175·746f··e·--add=dnf-auto | |||
| 00039af0:·6d61·7469·630a·3c2f·636f·6465·3e3c·2f70··matic.</code></p | |||
| 00039b00:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00039b10:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00039b20:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00039b30:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00039b40:·7461·7267·6574·3d22·2369·646d·3834·3431··target="#idm8441 | |||
| 00039b50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00039b60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00039b70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00039b80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00039b90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00039ba0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00039bb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039bc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039bd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039be0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039bf0:·7365·2220·6964·3d22·6964·6d38·3434·3122··se"·id="idm8441" | |||
| 00039c00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039c10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039c20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039 | 00039c30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 00039 | 00039c40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 00039c50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039c60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039c70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039c80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039c90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00039ca0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00039cb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00039cc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00039cd0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 00039ce0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 00039cf0:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 00039d00:·2045·6e73·7572·6520·646e·662d·6175·746f···Ensure·dnf-auto | |||
| 00039d10:·6d61·7469·6320·6973·2069·6e73·7461·6c6c··matic·is·install | |||
| 00039d20:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 00039d30:·2020·6e61·6d65·3a20·646e·662d·6175·746f····name:·dnf-auto | |||
| 00039d40:·6d61·7469·630a·2020·2020·7374·6174·653a··matic.····state: | |||
| 00039d50:·2070·7265·7365·6e74·0a20·2074·6167·733a···present.··tags: | |||
| 00039d60:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 00039d70:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 00039d80:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 00039d90:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 00039da0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 00039db0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00039dc0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 00039dd0:·646e·662d·6175·746f·6d61·7469·635f·696e··dnf-automatic_in | |||
| 00039de0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 00039df0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00039e00:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00039e10:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00039e20:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00039e30:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00039e40:·3432·2220·7461·6269·6e64·6578·3d22·3022··42"·tabindex="0" | |||
| 00039e50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00039e60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00039e70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00039e80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| Max diff block lines reached; 236122/261016 bytes (90.46%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:oracle:linux:9 | 47 | ····*·cpe:/o:oracle:linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 57 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 80, 14 lines modified | Offset 80, 26 lines modified | ||
| 80 | $·sudo·yum·install·dnf-automatic | 80 | $·sudo·yum·install·dnf-automatic |
| 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 81 | Rationale:··dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 82 | ············suitable·for·automatic,·regular·execution. | 82 | ············suitable·for·automatic,·regular·execution. |
| 83 | Severity: ··medium | 83 | Severity: ··medium |
| 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 84 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 85 | References:·_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 86 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 88 | [[packages]] | ||
| 89 | name·=·"dnf-automatic" | ||
| 90 | version·=·"*" | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 96 | package·--add=dnf-automatic | ||
| 87 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 97 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 88 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 98 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 89 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 99 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 90 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 100 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 91 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 101 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 92 | -·name:·Ensure·dnf-automatic·is·installed | 102 | -·name:·Ensure·dnf-automatic·is·installed |
| 93 | ··package: | 103 | ··package: |
| Offset 96, 47 lines modified | Offset 108, 35 lines modified | ||
| 96 | ··tags: | 108 | ··tags: |
| 97 | ··-·enable_strategy | 109 | ··-·enable_strategy |
| 98 | ··-·low_complexity | 110 | ··-·low_complexity |
| 99 | ··-·low_disruption | 111 | ··-·low_disruption |
| 100 | ··-·medium_severity | 112 | ··-·medium_severity |
| 101 | ··-·no_reboot_needed | 113 | ··-·no_reboot_needed |
| 102 | ··-·package_dnf-automatic_installed | 114 | ··-·package_dnf-automatic_installed |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 108 | include·install_dnf-automatic | ||
| 109 | class·install_dnf-automatic·{ | ||
| 110 | ··package·{·'dnf-automatic': | ||
| 111 | ····ensure·=>·'installed', | ||
| 112 | ··} | ||
| 113 | } | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | [[packages]] | ||
| 116 | name·=·"dnf-automatic" | ||
| 117 | version·=·"*" | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 120 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 124 | ····yum·install·-y·"dnf-automatic" | 121 | ····yum·install·-y·"dnf-automatic" |
| 125 | fi | 122 | fi |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | include·install_dnf-automatic | ||
| 129 | class·install_dnf-automatic·{ | ||
| 131 | package· | 130 | ··package·{·'dnf-automatic': |
| 131 | ····ensure·=>·'installed', | ||
| 132 | ··} | ||
| 133 | } | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 134 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 135 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 134 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 136 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 137 | automatic.conf. |
| 136 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 138 | ············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 137 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 139 | ············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 138 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 140 | Rationale:··updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 10640, 14 lines modified | Offset 10640, 21 lines modified | ||
| 10640 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 | 10640 | ···························2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·7.6 |
| 10641 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 10641 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 10642 | ···························A.9.1.2 | 10642 | ···························A.9.1.2 |
| 10643 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 10643 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 10644 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 10644 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 10645 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 10645 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 10646 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 10646 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 10647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 10652 | package·--remove=dhcp | ||
| 10647 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10648 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10649 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10650 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10651 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 10657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 10652 | -·name:·Ensure·dhcp·is·removed | 10658 | -·name:·Ensure·dhcp·is·removed |
| 10653 | ··package: | 10659 | ··package: |
| Offset 10660, 26 lines modified | Offset 10667, 14 lines modified | ||
| 10660 | ··-·PCI-DSSv4-2.2.4 | 10667 | ··-·PCI-DSSv4-2.2.4 |
| 10661 | ··-·disable_strategy | 10668 | ··-·disable_strategy |
| 10662 | ··-·low_complexity | 10669 | ··-·low_complexity |
| 10663 | ··-·low_disruption | 10670 | ··-·low_disruption |
| 10664 | ··-·medium_severity | 10671 | ··-·medium_severity |
| 10665 | ··-·no_reboot_needed | 10672 | ··-·no_reboot_needed |
| 10666 | ··-·package_dhcp_removed | 10673 | ··-·package_dhcp_removed |
| 10667 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10668 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| Max diff block lines reached; 27763/33778 bytes (82.19%) of diff not shown. | |||
| Offset 14331, 15 lines modified | Offset 14331, 15 lines modified | ||
| 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037fa0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037fb0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037fc0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037fd0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037fe0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ff0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038000:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00038010:·323 | 00038010:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00038020:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00038030:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00038040:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00038050:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00038060:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038070:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038080:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15496, 256 lines modified | Offset 15496, 256 lines modified | ||
| 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | 0003c870:·612d·7461·7267·6574·3d22·2369·646d·3537··a-target="#idm57 | ||
| 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | 0003c880:·3632·2220·7461·6269·6e64·6578·3d22·3022··62"·tabindex="0" | ||
| 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003c890:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003c8a0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003c8b0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003c8c0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003c8d0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003c8e0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003c8f0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003c900:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003c910:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003c920:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003c930:·6964·3d22·6964·6d35·3736·3222·3e3c·7072··id="idm5762"><pr | |||
| 0003c940:·653e·3c63·6f64·653e·0a5b·6375·7374·6f6d··e><code>.[custom | |||
| 0003c950:·697a·6174·696f·6e73·5d0a·6669·7073·203d··izations].fips·= | |||
| 0003c960:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | |||
| 0003c970:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003c980:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003c990:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003c9a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003c9b0:·7461·7267·6574·3d22·2369·646d·3537·3633··target="#idm5763 | |||
| 0003c9c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003c9d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003c9e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003c9f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ca00:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ca10:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003c | 0003ca20:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | ||
| 0003c | 0003ca30:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | ||
| 0003c | 0003ca40:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | ||
| 0003c | 0003ca50:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | ||
| 0003c | 0003ca60:·7365·2220·6964·3d22·6964·6d35·3736·3322··se"·id="idm5763" | ||
| 0003c | 0003ca70:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | ||
| 0003c | 0003ca80:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | ||
| 0003c | 0003ca90:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003c | 0003caa0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003c | 0003cab0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | ||
| 0003c | 0003cac0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6d··exity:</th><td>m | ||
| 0003c | 0003cad0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0003c | 0003cae0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003c | 0003caf0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | ||
| 0003c | 0003cb00:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0003c | 0003cb10:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0003c | 0003cb20:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0003c | 0003cb30:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003c | 0003cb40:·793a·3c2f·7468·3e3c·7464·3e72·6573·7472··y:</th><td>restr | ||
| 0003c | 0003cb50:·6963·743c·2f74·643e·3c2f·7472·3e3c·2f74··ict</td></tr></t | ||
| 0003c | 0003cb60:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003c | 0003cb70:·2d20·6e61·6d65·3a20·5843·4344·4620·5661··-·name:·XCCDF·Va | ||
| 0003c | 0003cb80:·6c75·6520·7661·725f·7379·7374·656d·5f63··lue·var_system_c | ||
| 0003c | 0003cb90:·7279·7074·6f5f·706f·6c69·6379·2023·2070··rypto_policy·#·p | ||
| 0003c | 0003cba0:·726f·6d6f·7465·2074·6f20·7661·7269·6162··romote·to·variab | ||
| 0003c | 0003cbb0:·6c65·0a20·2073·6574·5f66·6163·743a·0a20··le.··set_fact:.· | ||
| 0003c | 0003cbc0:·2020·2076·6172·5f73·7973·7465·6d5f·6372·····var_system_cr | ||
| 0003c | 0003cbd0:·7970·746f·5f70·6f6c·6963·793a·2021·2173··ypto_policy:·!!s | ||
| 0003c | 0003cbe0:·7472·203c·6162·6272·2074·6974·6c65·3d22··tr·<abbr·title=" | ||
| 0003c | 0003cbf0:·6672·6f6d·2050·726f·6669·6c65·2f72·6566··from·Profile/ref | ||
| 0003c | 0003cc00:·696e·652d·7661·6c75·653a·2078·6363·6466··ine-value:·xccdf | ||
| 0003c | 0003cc10:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 0003c | 0003cc20:·636f·6e74·656e·745f·7661·6c75·655f·7661··content_value_va | ||
| 0003c | 0003cc30:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | ||
| 0003c | 0003cc40:·706f·6c69·6379·223e·4649·5053·3a4f·5350··policy">FIPS:OSP | ||
| 0003c | 0003cc50:·503c·2f61·6262·723e·0a20·2074·6167·733a··P</abbr>.··tags: | ||
| 0003c | 0003cc60:·0a20·2020·202d·2061·6c77·6179·730a·0a2d··.····-·always..- | ||
| 0003c | 0003cc70:·206e·616d·653a·2045·6e61·626c·6520·4649···name:·Enable·FI | ||
| 0003c | 0003cc80:·5053·204d·6f64·6520·2d20·4368·6563·6b20··PS·Mode·-·Check· | ||
| 0003c | 0003cc90:·746f·2053·6565·2074·6865·2043·7572·7265··to·See·the·Curre | ||
| 0003c | 0003cca0:·6e74·2053·7461·7475·7320·6f66·2046·4950··nt·Status·of·FIP | ||
| 0003c | 0003ccb0:·5320·4d6f·6465·0a20·2061·6e73·6962·6c65··S·Mode.··ansible | ||
| 0003c | 0003ccc0:·2e62·7569·6c74·696e·2e63·6f6d·6d61·6e64··.builtin.command | ||
| 0003c | 0003ccd0:·3a20·2f75·7372·2f62·696e·2f66·6970·732d··:·/usr/bin/fips- | ||
| 0003c | 0003cce0:·6d6f·6465·2d73·6574·7570·202d·2d63·6865··mode-setup·--che | ||
| 0003c | 0003ccf0:·636b·0a20·2072·6567·6973·7465·723a·2069··ck.··register:·i | ||
| 0003c | 0003cd00:·735f·6669·7073·5f65·6e61·626c·6564·0a20··s_fips_enabled.· | ||
| 0003c | 0003cd10:·2066·6169·6c65·645f·7768·656e·3a20·6661···failed_when:·fa | ||
| 0003c | 0003cd20:·6c73·650a·2020·6368·616e·6765·645f·7768··lse.··changed_wh | ||
| 0003c | 0003cd30:·656e·3a20·6661·6c73·650a·2020·7768·656e··en:·false.··when | ||
| 0003c | 0003cd40:·3a0a·2020·2d20·2820·616e·7369·626c·655f··:.··-·(·ansible_ | ||
| 0003c | 0003cd50:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | ||
| 0003c | 0003cd60:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | ||
| 0003c | 0003cd70:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | ||
| 0003c | 0003cd80:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | ||
| 0003c | 0003cd90:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | ||
| 0003c | 0003cda0:·2020·616e·6420·6e6f·7420·2820·6c6f·6f6b····and·not·(·look | ||
| 0003c | 0003cdb0:·7570·2822·656e·7622·2c20·2263·6f6e·7461··up("env",·"conta | ||
| 0003c | 0003cdc0:·696e·6572·2229·203d·3d20·2262·7772·6170··iner")·==·"bwrap | ||
| 0003c | 0003cdd0:·2d6f·7362·7569·6c64·2220·2920·290a·2020··-osbuild"·)·).·· | ||
| 0003c | 0003cde0:·2d20·616e·7369·626c·655f·7669·7274·7561··-·ansible_virtua | ||
| 0003c | 0003cdf0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | ||
| 0003c | 0003ce00:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | ||
| 0003c | 0003ce10:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | ||
| 0003c | 0003ce20:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | ||
| 0003c | 0003ce30:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | ||
| 0003c | 0003ce40:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003ce50:·434d·2d33·2836·290a·2020·2d20·4e49·5354··CM-3(6).··-·NIST | ||
| 0003c | 0003ce60:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | ||
| 0003c | 0003ce70:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | ||
| 0003c | 0003ce80:·4941·2d37·0a20·202d·204e·4953·542d·3830··IA-7.··-·NIST-80 | ||
| 0003c | 0003ce90:·302d·3533·2d53·432d·3132·0a20·202d·204e··0-53-SC-12.··-·N | ||
| 0003cea0:·4953·542d·3830·302d·3533·2d53·432d·3132··IST-800-53-SC-12 | |||
| 0003ceb0:·2832·290a·2020·2d20·4e49·5354·2d38·3030··(2).··-·NIST-800 | |||
| 0003cec0:·2d35·332d·5343·2d31·3228·3329·0a20·202d··-53-SC-12(3).··- | |||
| 0003c | 0003ced0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | ||
| 0003cee0:·3133·0a20·202d·2065·6e61·626c·655f·6669··13.··-·enable_fi | |||
| 0003cef0:·7073·5f6d·6f64·650a·2020·2d20·6869·6768··ps_mode.··-·high | |||
| 0003cf00:·5f73·6576·6572·6974·790a·2020·2d20·6d65··_severity.··-·me | |||
| 0003cf10:·6469·756d·5f63·6f6d·706c·6578·6974·790a··dium_complexity. | |||
| 0003cf20:·2020·2d20·6d65·6469·756d·5f64·6973·7275····-·medium_disru | |||
| 0003cf30:·7074·696f·6e0a·2020·2d20·7265·626f·6f74··ption.··-·reboot | |||
| 0003cf40:·5f72·6571·7569·7265·640a·2020·2d20·7265··_required.··-·re | |||
| 0003cf50:·7374·7269·6374·5f73·7472·6174·6567·790a··strict_strategy. | |||
| Max diff block lines reached; 1130737/1165843 bytes (96.99%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:oracle:linux:9 | 54 | ····*·cpe:/o:oracle:linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 64 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 195, 14 lines modified | Offset 195, 18 lines modified | ||
| 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 195 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 196 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 197 | ············_\x8i_\x8s_\x8m······1446 | 197 | ············_\x8i_\x8s_\x8m······1446 |
| 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 198 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 199 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 200 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 201 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 203 | [customizations] | ||
| 204 | fips·=·true | ||
| 202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 205 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 206 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 207 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 208 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 209 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 207 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 210 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 208 | ··set_fact: | 211 | ··set_fact: |
| Offset 298, 18 lines modified | Offset 302, 14 lines modified | ||
| 298 | ··-·NIST-800-53-SC-13 | 302 | ··-·NIST-800-53-SC-13 |
| 299 | ··-·enable_fips_mode | 303 | ··-·enable_fips_mode |
| 300 | ··-·high_severity | 304 | ··-·high_severity |
| 301 | ··-·medium_complexity | 305 | ··-·medium_complexity |
| 302 | ··-·medium_disruption | 306 | ··-·medium_disruption |
| 303 | ··-·reboot_required | 307 | ··-·reboot_required |
| 304 | ··-·restrict_strategy | 308 | ··-·restrict_strategy |
| 305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 306 | [customizations] | ||
| 307 | fips·=·true | ||
| 308 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 309 | #·Remediation·is·applicable·only·in·certain·platforms | 310 | #·Remediation·is·applicable·only·in·certain·platforms |
| 310 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 311 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 311 | var_system_crypto_policy='FIPS:OSPP' | 312 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 347, 14 lines modified | Offset 347, 26 lines modified | ||
| 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 347 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 348 | $·sudo·yum·install·crypto-policies | 348 | $·sudo·yum·install·crypto-policies |
| 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 349 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 350 | Severity: ··medium | 350 | Severity: ··medium |
| 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 351 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 352 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 353 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 355 | [[packages]] | ||
| 356 | name·=·"crypto-policies" | ||
| 357 | version·=·"*" | ||
| 358 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 359 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 360 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 361 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 362 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 363 | package·--add=crypto-policies | ||
| 354 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 364 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 355 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 365 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 356 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 366 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 357 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 367 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 358 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 368 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 359 | -·name:·Ensure·crypto-policies·is·installed | 369 | -·name:·Ensure·crypto-policies·is·installed |
| 360 | ··package: | 370 | ··package: |
| Offset 363, 47 lines modified | Offset 375, 35 lines modified | ||
| 363 | ··tags: | 375 | ··tags: |
| 364 | ··-·enable_strategy | 376 | ··-·enable_strategy |
| 365 | ··-·low_complexity | 377 | ··-·low_complexity |
| 366 | ··-·low_disruption | 378 | ··-·low_disruption |
| 367 | ··-·medium_severity | 379 | ··-·medium_severity |
| 368 | ··-·no_reboot_needed | 380 | ··-·no_reboot_needed |
| 369 | ··-·package_crypto-policies_installed | 381 | ··-·package_crypto-policies_installed |
| 370 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 371 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 372 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 373 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 374 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 375 | include·install_crypto-policies | ||
| 376 | class·install_crypto-policies·{ | ||
| 377 | ··package·{·'crypto-policies': | ||
| 378 | ····ensure·=>·'installed', | ||
| 379 | ··} | ||
| 380 | } | ||
| 381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 382 | [[packages]] | ||
| 383 | name·=·"crypto-policies" | ||
| 384 | version·=·"*" | ||
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 390 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 387 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 391 | ····yum·install·-y·"crypto-policies" | 388 | ····yum·install·-y·"crypto-policies" |
| 392 | fi | 389 | fi |
| 393 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 390 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 394 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 391 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 395 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 392 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 396 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 393 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 397 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 394 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 395 | include·install_crypto-policies | ||
| 396 | class·install_crypto-policies·{ | ||
| 398 | package· | 397 | ··package·{·'crypto-policies': |
| 398 | ····ensure·=>·'installed', | ||
| 399 | ··} | ||
| 400 | } | ||
| 399 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 401 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 139937/146169 bytes (95.74%) of diff not shown. | |||
| Offset 14296, 16 lines modified | Offset 14296, 16 lines modified | ||
| 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037d70:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037d80:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037d90:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037da0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037db0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037dc0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037dd0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037de0:·2020·2861·7320·6f66·2032·3032·3 | 00037de0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037df0:·2d32·3 | 00037df0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e00:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e10:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e20:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e30:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037e40:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037e50:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037e60:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19007, 273 lines modified | Offset 19007, 273 lines modified | ||
| 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | 0004a3e0:·612d·7461·7267·6574·3d22·2369·646d·3833··a-target="#idm83 | ||
| 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | 0004a3f0:·3132·2220·7461·6269·6e64·6578·3d22·3022··12"·tabindex="0" | ||
| 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0004a400:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0004a410:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0004a420:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0004a430:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0004a440:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a450:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0004a460:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0004a470:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0004a480:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0004a490:·6170·7365·2220·6964·3d22·6964·6d38·3331··apse"·id="idm831 | |||
| 0004a4a0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0004a4b0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0004a4c0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0004a4d0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0004a4e0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0004a4f0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0004a500:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0004a | 0004a450:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0004a460:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0004a470:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004a480:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004a490:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004a4a0:·6964·3d22·6964·6d38·3331·3222·3e3c·7072··id="idm8312"><pr | |||
| 0004a4b0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0004a4c0:·6765·735d·5d0a·6e61·6d65·203d·2022·7265··ges]].name·=·"re | |||
| 0004a4d0:·6172·220a·7665·7273·696f·6e20·3d20·222a··ar".version·=·"* | |||
| 0004a4e0:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0004a4f0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0004a500:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0004a510:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0004a520:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0004a530:·6574·3d22·2369·646d·3833·3133·2220·7461··et="#idm8313"·ta | |||
| 0004a540:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0004a550:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0004a560:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0004a570:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0004a580:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0004a590:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0004a5a0:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 0004a5b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0004a5c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0004a5d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0004a5e0:·2069·643d·2269·646d·3833·3133·223e·3c74···id="idm8313"><t | |||
| 0004a5f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0004a600:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0004a610:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0004a620:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0004a630:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0004a | 0004a640:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a | 0004a650:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a660:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a670:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0004a680:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a690:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0004a6a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a6b0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0004a6c0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0004a6d0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004a6e0:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 0004a6f0:·2d61·6464·3d72·6561·720a·3c2f·636f·6465··-add=rear.</code | |||
| 0004a700:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0004a710:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0004a720:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0004a730:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0004a740:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0004a750:·3833·3134·2220·7461·6269·6e64·6578·3d22··8314"·tabindex=" | |||
| 0004a760:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0004a770:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0004a780:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0004a790:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0004a7a0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0004a7b0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 0004a7c0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0004a7d0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0004a7e0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0004a7f0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0004a800:·3331·3422·3e3c·7461·626c·6520·636c·6173··314"><table·clas | |||
| 0004a810:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0004a820:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0004a830:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0004a840:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0004a850:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0004a860:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004a870:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0004a880:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0004a890:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0004a | 0004a8a0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a | 0004a8b0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | ||
| 0004a | 0004a8c0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | ||
| 0004a | 0004a8d0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | ||
| 0004a | 0004a8e0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a | 0004a8f0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 0004a | 0004a900:·616d·653a·2045·6e73·7572·6520·7265·6172··ame:·Ensure·rear | ||
| 0004a | 0004a910:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | ||
| 0004a | 0004a920:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | ||
| 0004a | 0004a930:·653a·2072·6561·720a·2020·2020·7374·6174··e:·rear.····stat | ||
| 0004a | 0004a940:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | ||
| 0004a | 0004a950:·6e3a·206e·6f74·2028·2028·2028·2061·6e73··n:·not·(·(·(·ans | ||
| 0004a60 | 0004a960:·6962·6c65·5f61·7263·6869·7465·6374·7572··ible_architectur | ||
| 0004a | 0004a970:·6520·3d3d·2022·6161·7263·6836·3422·2061··e·==·"aarch64"·a | ||
| 0004a980:·6e64·2061·6e73·6962·6c65·5f64·6973·7472··nd·ansible_distr | |||
| 0004a990:·6962·7574·696f·6e20·3d3d·2027·4f72·6163··ibution·==·'Orac | |||
| 0004a9a0:·6c65·4c69·6e75·7827·0a20·2020·2061·6e64··leLinux'.····and | |||
| 0004a | 0004a9b0:·2061·6e73·6962·6c65·5f64·6973·7472·6962···ansible_distrib | ||
| 0004a630:·7574·696f·6e20·3d3d·2027·4f72·6163·6c65··ution·==·'Oracle | |||
| 0004a640:·4c69·6e75·7827·0a20·2020·2061·6e64·2061··Linux'.····and·a | |||
| 0004a650:·6e73·6962·6c65·5f64·6973·7472·6962·7574··nsible_distribut | |||
| 0004a | 0004a9c0:·7574·696f·6e5f·7665·7273·696f·6e20·6973··ution_version·is | ||
| Max diff block lines reached; 637581/675171 bytes (94.43%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 53 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 950, 14 lines modified | Offset 950, 26 lines modified | ||
| 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. | 950 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·following·checks·evaluate·the·system·for·recommended·base·packages·--·both·for·installation·and·removal. |
| 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 951 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 952 | The·rear·package·can·be·installed·with·the·following·command: | 952 | The·rear·package·can·be·installed·with·the·following·command: |
| 953 | $·sudo·yum·install·rear | 953 | $·sudo·yum·install·rear |
| 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 954 | Rationale:·rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 955 | Severity: ·medium | 955 | Severity: ·medium |
| 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed | 956 | Rule·ID:···xccdf_org.ssgproject.content_rule_package_rear_installed |
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 958 | [[packages]] | ||
| 959 | name·=·"rear" | ||
| 960 | version·=·"*" | ||
| 961 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 962 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 963 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 964 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 965 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 966 | package·--add=rear | ||
| 957 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 967 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 958 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 968 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 959 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 969 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 960 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 970 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 961 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 971 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 962 | -·name:·Ensure·rear·is·installed | 972 | -·name:·Ensure·rear·is·installed |
| 963 | ··package: | 973 | ··package: |
| Offset 971, 31 lines modified | Offset 983, 14 lines modified | ||
| 971 | ··tags: | 983 | ··tags: |
| 972 | ··-·enable_strategy | 984 | ··-·enable_strategy |
| 973 | ··-·low_complexity | 985 | ··-·low_complexity |
| 974 | ··-·low_disruption | 986 | ··-·low_disruption |
| 975 | ··-·medium_severity | 987 | ··-·medium_severity |
| 976 | ··-·no_reboot_needed | 988 | ··-·no_reboot_needed |
| 977 | ··-·package_rear_installed | 989 | ··-·package_rear_installed |
| 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 983 | include·install_rear | ||
| 984 | class·install_rear·{ | ||
| 985 | ··package·{·'rear': | ||
| 986 | ····ensure·=>·'installed', | ||
| 987 | ··} | ||
| 988 | } | ||
| 989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 990 | [[packages]] | ||
| 991 | name·=·"rear" | ||
| 992 | version·=·"*" | ||
| 993 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 990 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 994 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 991 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 995 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 992 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 996 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 993 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 997 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 994 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 998 | #·Remediation·is·applicable·only·in·certain·platforms | 995 | #·Remediation·is·applicable·only·in·certain·platforms |
| 999 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then | 996 | if·!·(·(·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?ol[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-q·aarch64·/proc/sys/kernel/osrelease·&&·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="9.0";·printf·"%s\n%s"·"$expected"·"$real"·|·sort·-VC;·}·)·||·(·grep·-qP·"^ID=[\"']?rhel[\"']?$"·"/etc/os-release"·&&·{·real="$(grep·-P·"^VERSION_ID=[\"']?[\w.]+[\"']?$"·/etc/os-release·|·sed·"s/^VERSION_ID=[\"']\?\([^\"']\+\)[\"']\?$/\1/")";·expected="8.4";·printf·"%s\n%s"·"$real"·"$expected"·|·sort·-VC;·}·&&·grep·-q·s390x·/proc/sys/kernel/osrelease·)·)·);·then |
| Offset 1003, 21 lines modified | Offset 998, 26 lines modified | ||
| 1003 | if·!·rpm·-q·--quiet·"rear"·;·then | 998 | if·!·rpm·-q·--quiet·"rear"·;·then |
| 1004 | ····yum·install·-y·"rear" | 999 | ····yum·install·-y·"rear" |
| 1005 | fi | 1000 | fi |
| 1006 | else | 1001 | else |
| 1007 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1002 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1008 | fi | 1003 | fi |
| 1009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1010 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1005 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1011 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1006 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1012 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1007 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1013 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1008 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1009 | include·install_rear | ||
| 1014 | 1010 | class·install_rear·{ | |
| 1011 | ··package·{·'rear': | ||
| 1012 | ····ensure·=>·'installed', | ||
| 1013 | ··} | ||
| 1014 | } | ||
| 1015 | Group ·Updating·Software· Group·contains·6·rules | 1015 | Group ·Updating·Software· Group·contains·6·rules |
| 1016 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. | 1016 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·yum·command·line·tool·is·used·to·install·and·update·software·packages.·The·system·also·provides·a·graphical·software·update·tool·in·the·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·menu,·in·the·A\x8Ad\x8dm\x8mi\x8in\x8ni\x8is\x8st\x8tr\x8ra\x8at\x8ti\x8io\x8on\x8n·submenu,·called·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e. |
| 1017 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. | 1017 | Oracle·Linux·9·systems·contain·an·installed·software·catalog·called·the·RPM·database,·which·records·metadata·of·installed·packages.·Consistently·using·yum·or·the·graphical·S\x8So\x8of\x8ft\x8tw\x8wa\x8ar\x8re\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8e·for·all·software·installation·allows·for·insight·into·the·current·inventory·of·installed·software·on·the·system. |
| 1018 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1018 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·O\x8On\x8nl\x8ly\x8y·S\x8Se\x8ec\x8cu\x8ur\x8ri\x8it\x8ty\x8y·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1019 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. | 1019 | To·configure·dnf-automatic·to·install·only·security·updates·automatically,·set·upgrade_type·to·security·under·[commands]·section·in·/etc/dnf/automatic.conf. |
| Offset 1500, 38 lines modified | Offset 1500, 14 lines modified | ||
| 1500 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 | 1500 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 |
| 1501 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) | 1501 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) |
| 1502 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1502 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1503 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1503 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1504 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1504 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1505 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1505 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1506 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1506 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1507 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1508 | --- | ||
| 1509 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1510 | kind:·MachineConfig | ||
| 1511 | spec: | ||
| 1512 | ··config: | ||
| 1513 | ····ignition: | ||
| 1514 | ······version:·3.1.0 | ||
| 1515 | ····storage: | ||
| 1516 | ······files: | ||
| 1517 | ······-·contents: | ||
| 1518 | ··········source: | ||
| 1519 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1520 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1521 | ········mode:·0644 | ||
| 1522 | ········path:·/etc/pam.d/password-auth | ||
| 1523 | ········overwrite:·true | ||
| 1524 | ······-·contents: | ||
| Max diff block lines reached; 71016/86505 bytes (82.09%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037eb0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037ec0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037ed0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037ee0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037ef0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037f00:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037f10:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037f20:·6620·3230·323 | 00037f20:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037f30:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037f40:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037f50:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037f60:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037f70:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037f80:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037f90:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 21145, 321 lines modified | Offset 21145, 321 lines modified | ||
| 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00052980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | 00052990:·6d31·3135·3837·2220·7461·6269·6e64·6578··m11587"·tabindex | ||
| 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000529a0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000529b0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000529c0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000529d0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000529e0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000529f0:·6d65·6469·6174·696f·6e20·4 | 000529f0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00052a00:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00052a10:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00052a20:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00052a30:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00052a40:·7365·2220·6964·3d22·6964·6d31·3135·3837··se"·id="idm11587 | |||
| 00052a50:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b63··"><pre><code>.[c | |||
| 00052a60:·7573·746f·6d69·7a61·7469·6f6e·732e·7365··ustomizations.se | |||
| 00052a70:·7276·6963·6573·5d0a·6d61·736b·6564·203d··rvices].masked·= | |||
| 00052a00:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00052a10:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00052a20:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00052a30:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00052a40:·6d31·3135·3837·223e·3c74·6162·6c65·2063··m11587"><table·c | |||
| 00052a50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00052a60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00052a70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00052a80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00052a90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00052aa0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00052ab0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00052ac0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00052ad0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00052ae0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00052af0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00052b00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00052b10:·6567·793a·3c2f·7468·3e3c·7464·3e64·6973··egy:</th><td>dis | |||
| 00052b20:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00052b30:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00052b40:·3e2d·206e·616d·653a·2044·6973·6162·6c65··>-·name:·Disable | |||
| 00052 | 00052a80:·205b·2264·6562·7567·2d73·6865·6c6c·225d···["debug-shell"] | ||
| 00052a90:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00052aa0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00052ab0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00052ac0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00052ad0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00052ae0:·743d·2223·6964·6d31·3135·3838·2220·7461··t="#idm11588"·ta | |||
| 00052af0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00052b00:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00052b10:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00052b20:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00052b30:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00052b40:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00052b50:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00052b60:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00052b70:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00052b60:·7465·6d44·2053·6572·7669·6365·202d·2043··temD·Service·-·C | |||
| 00052b70:·6f6c·6c65·6374·2073·7973·7465·6d64·2053··ollect·systemd·S | |||
| 00052b80:·6572·7669·6365·7320·5072·6573·656e·7420··ervices·Present· | |||
| 00052b90:·696e·0a20·2020·2074·6865·2053·7973·7465··in.····the·Syste | |||
| 00052ba0:·6d0a·2020·616e·7369·626c·652e·6275·696c··m.··ansible.buil | |||
| 00052bb0:·7469·6e2e·636f·6d6d·616e·643a·2073·7973··tin.command:·sys | |||
| 00052bc0:·7465·6d63·746c·202d·7120·6c69·7374·2d75··temctl·-q·list-u | |||
| 00052bd0:·6e69·742d·6669·6c65·7320·2d2d·7479·7065··nit-files·--type | |||
| 00052be0:·2073·6572·7669·6365·0a20·2072·6567·6973···service.··regis | |||
| 00052bf0:·7465·723a·2073·6572·7669·6365·5f65·7869··ter:·service_exi | |||
| 00052c00:·7374·730a·2020·6368·616e·6765·645f·7768··sts.··changed_wh | |||
| 00052c10:·656e·3a20·6661·6c73·650a·2020·6661·696c··en:·false.··fail | |||
| 00052c20:·6564·5f77·6865·6e3a·2073·6572·7669·6365··ed_when:·service | |||
| 00052c30:·5f65·7869·7374·732e·7263·206e·6f74·2069··_exists.rc·not·i | |||
| 00052c40:·6e20·5b30·2c20·315d·0a20·2063·6865·636b··n·[0,·1].··check | |||
| 00052c50:·5f6d·6f64·653a·2066·616c·7365·0a20·2077··_mode:·false.··w | |||
| 00052c60:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00052c70:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00052c80:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00052c90:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00052ca0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00052cb0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00052cc0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| 00052cd0:·3137·312d·332e·342e·350a·2020·2d20·4e49··171-3.4.5.··-·NI | |||
| 00052ce0:·5354·2d38·3030·2d35·332d·434d·2d36·0a20··ST-800-53-CM-6.· | |||
| 00052cf0:·202d·2064·6973·6162·6c65·5f73·7472·6174···-·disable_strat | |||
| 00052d00:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 00052d10:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 00052d20:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 00052d30:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 00052d40:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 00052d50:·6564·0a20·202d·2073·6572·7669·6365·5f64··ed.··-·service_d | |||
| 00052d60:·6562·7567·2d73·6865·6c6c·5f64·6973·6162··ebug-shell_disab | |||
| 00052d70:·6c65·640a·0a2d·206e·616d·653a·2044·6973··led..-·name:·Dis | |||
| 00052d80:·6162·6c65·2064·6562·7567·2d73·6865·6c6c··able·debug-shell | |||
| 00052d90:·2053·7973·7465·6d44·2053·6572·7669·6365···SystemD·Service | |||
| 00052da0:·202d·2045·6e73·7572·6520·6465·6275·672d···-·Ensure·debug- | |||
| 00052db0:·7368·656c·6c2e·7365·7276·6963·6520·6973··shell.service·is | |||
| 00052dc0:·204d·6173·6b65·640a·2020·616e·7369·626c···Masked.··ansibl | |||
| 00052dd0:·652e·6275·696c·7469·6e2e·7379·7374·656d··e.builtin.system | |||
| 00052de0:·643a·0a20·2020·206e·616d·653a·2064·6562··d:.····name:·deb | |||
| 00052df0:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 00052e00:·0a20·2020·2073·7461·7465·3a20·7374·6f70··.····state:·stop | |||
| 00052e10:·7065·640a·2020·2020·656e·6162·6c65·643a··ped.····enabled: | |||
| 00052e20:·2066·616c·7365·0a20·2020·206d·6173·6b65···false.····maske | |||
| 00052e30:·643a·2074·7275·650a·2020·7768·656e·3a0a··d:·true.··when:. | |||
| 00052e40:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | |||
| 00052e50:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00052e60:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00052e70:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00052e80:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00052e90:·6e74·6169·6e65·7222·5d0a·2020·2d20·7365··ntainer"].··-·se | |||
| 00052ea0:·7276·6963·655f·6578·6973·7473·2e73·7464··rvice_exists.std | |||
| 00052eb0:·6f75·745f·6c69·6e65·7320·6973·2073·6561··out_lines·is·sea | |||
| 00052ec0:·7263·6828·2264·6562·7567·2d73·6865·6c6c··rch("debug-shell | |||
| 00052ed0:·2e73·6572·7669·6365·222c·206d·756c·7469··.service",·multi | |||
| 00052ee0:·6c69·6e65·3d54·7275·6529·0a20·2074·6167··line=True).··tag | |||
| 00052ef0:·733a·0a20·202d·204e·4953·542d·3830·302d··s:.··-·NIST-800- | |||
| Max diff block lines reached; 517799/561875 bytes (92.16%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:oracle:linux:9 | 50 | ····*·cpe:/o:oracle:linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1315, 14 lines modified | Offset 1315, 18 lines modified | ||
| 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled | 1315 | Rule·ID:····xccdf_org.ssgproject.content_rule_service_debug-shell_disabled |
| 1316 | ············_\x8c_\x8u_\x8i····3.4.5 | 1316 | ············_\x8c_\x8u_\x8i····3.4.5 |
| 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1317 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1318 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1319 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1320 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1321 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1323 | [customizations.services] | ||
| 1324 | masked·=·["debug-shell"] | ||
| 1322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1323 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1324 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1325 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1326 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1327 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1330 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1328 | ····the·System | 1331 | ····the·System |
| Offset 1392, 31 lines modified | Offset 1396, 14 lines modified | ||
| 1392 | ··-·NIST-800-53-CM-6 | 1396 | ··-·NIST-800-53-CM-6 |
| 1393 | ··-·disable_strategy | 1397 | ··-·disable_strategy |
| 1394 | ··-·low_complexity | 1398 | ··-·low_complexity |
| 1395 | ··-·low_disruption | 1399 | ··-·low_disruption |
| 1396 | ··-·medium_severity | 1400 | ··-·medium_severity |
| 1397 | ··-·no_reboot_needed | 1401 | ··-·no_reboot_needed |
| 1398 | ··-·service_debug-shell_disabled | 1402 | ··-·service_debug-shell_disabled |
| 1399 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1400 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1401 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1402 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1403 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1404 | include·disable_debug-shell | ||
| 1405 | class·disable_debug-shell·{ | ||
| 1406 | ··service·{'debug-shell': | ||
| 1407 | ····enable·=>·false, | ||
| 1408 | ····ensure·=>·'stopped', | ||
| 1409 | ··} | ||
| 1410 | } | ||
| 1411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1412 | [customizations.services] | ||
| 1413 | masked·=·["debug-shell"] | ||
| 1414 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1403 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1415 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1404 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1416 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1405 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1417 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1406 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1418 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1407 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1419 | #·Remediation·is·applicable·only·in·certain·platforms | 1408 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1420 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1409 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1434, 14 lines modified | Offset 1421, 27 lines modified | ||
| 1434 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1421 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1435 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1422 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1436 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1423 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1437 | else | 1424 | else |
| 1438 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1425 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1439 | fi | 1426 | fi |
| 1427 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1428 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1429 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1430 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1431 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1432 | include·disable_debug-shell | ||
| 1433 | class·disable_debug-shell·{ | ||
| 1434 | ··service·{'debug-shell': | ||
| 1435 | ····enable·=>·false, | ||
| 1436 | ····ensure·=>·'stopped', | ||
| 1437 | ··} | ||
| 1438 | } | ||
| 1440 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1439 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1441 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. | 1440 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more·than·7·times·in·2·seconds. |
| 1442 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: | 1441 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/systemd/system.conf: |
| 1443 | CtrlAltDelBurstAction=none | 1442 | CtrlAltDelBurstAction=none |
| 1444 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. | 1443 | Warning: ·Disabling·the·Ctrl-Alt-Del·key·sequence·in·/etc/init/control-alt-delete.conf·DOES·NOT·disable·the·Ctrl-Alt-Del·key·sequence·if·running·in·runlevel·6·(e.g.·in·GNOME,·KDE,·etc.)!·The·Ctrl-Alt-Del·key·sequence·will·only·be·disabled·if·running·in·the·non-graphical·runlevel·3. |
| 1445 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. | 1444 | Rationale:··A·locally·logged-in·user·who·presses·Ctrl-Alt-Del,·when·at·the·console,·can·reboot·the·system.·If·accidentally·pressed,·as·could·happen·in·the·case·of·mixed·OS·environment,·this·can·create·the·risk·of·short-term·loss·of·availability·of·systems·due·to·unintentional·reboot. |
| Offset 1822, 38 lines modified | Offset 1822, 14 lines modified | ||
| 1822 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 | 1822 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 |
| 1823 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) | 1823 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) |
| 1824 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1824 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1825 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1825 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1826 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1826 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1827 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1827 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1828 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1828 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1830 | --- | ||
| 1831 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1832 | kind:·MachineConfig | ||
| 1833 | spec: | ||
| 1834 | ··config: | ||
| 1835 | ····ignition: | ||
| 1836 | ······version:·3.1.0 | ||
| 1837 | ····storage: | ||
| 1838 | ······files: | ||
| 1839 | ······-·contents: | ||
| 1840 | ··········source: | ||
| 1841 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1842 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1843 | ········mode:·0644 | ||
| 1844 | ········path:·/etc/pam.d/password-auth | ||
| 1845 | ········overwrite:·true | ||
| 1846 | ······-·contents: | ||
| 1847 | ··········source: | ||
| 1848 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1849 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1850 | ········mode:·0644 | ||
| 1851 | ········path:·/etc/pam.d/system-auth | ||
| 1852 | ········overwrite:·true | ||
| 1853 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1829 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 57719/72237 bytes (79.90%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037da0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037db0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037dc0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037dd0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037de0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037df0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·2861·7320·6f66·2032·3032·3 | 00037e10:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e20:·3 | 00037e20:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15464, 256 lines modified | Offset 15464, 256 lines modified | ||
| 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003c670:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | 0003c680:·743d·2223·6964·6d35·3736·3222·2074·6162··t="#idm5762"·tab | ||
| 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003c690:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003c6a0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003c6b0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003c6c0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003c6d0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003c6e0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003c6f0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | |||
| 0003c700:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003c710:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003c720:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003c730:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003c740:·3537·3632·223e·3c70·7265·3e3c·636f·6465··5762"><pre><code | |||
| 0003c750:·3e0a·5b63·7573·746f·6d69·7a61·7469·6f6e··>.[customization | |||
| 0003c760:·735d·0a66·6970·7320·3d20·7472·7565·0a3c··s].fips·=·true.< | |||
| 0003c770:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003c780:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003c790:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003c7a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003c7b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003c7c0:·2223·6964·6d35·3736·3322·2074·6162·696e··"#idm5763"·tabin | |||
| 0003c7d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003c7e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003c7f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003c800:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003c810:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003c820:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 0003c | 0003c830:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | ||
| 0003c | 0003c840:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0003c | 0003c850:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0003c | 0003c860:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0003c | 0003c870:·2269·646d·3537·3633·223e·3c74·6162·6c65··"idm5763"><table | ||
| 0003c | 0003c880:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0003c | 0003c890:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0003c | 0003c8a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| 0003c | 0003c8b0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | ||
| 0003c | 0003c8c0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | ||
| 0003c | 0003c8d0:·2f74·683e·3c74·643e·6d65·6469·756d·3c2f··/th><td>medium</ | ||
| 0003c8e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003c8f0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003c900:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 0003c910:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003c920:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 0003c | 0003c930:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003c7b0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003c7c0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 0003c7d0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003c7e0:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | |||
| 0003c7f0:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | |||
| 0003c | 0003c940:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | ||
| 0003c | 0003c950:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | ||
| 0003c | 0003c960:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0003c | 0003c970:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | ||
| 0003c | 0003c980:·2058·4343·4446·2056·616c·7565·2076·6172···XCCDF·Value·var | ||
| 0003c | 0003c990:·5f73·7973·7465·6d5f·6372·7970·746f·5f70··_system_crypto_p | ||
| 0003c | 0003c9a0:·6f6c·6963·7920·2320·7072·6f6d·6f74·6520··olicy·#·promote· | ||
| 0003c | 0003c9b0:·746f·2076·6172·6961·626c·650a·2020·7365··to·variable.··se | ||
| 0003c | 0003c9c0:·745f·6661·6374·3a0a·2020·2020·7661·725f··t_fact:.····var_ | ||
| 0003c | 0003c9d0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 0003c | 0003c9e0:·6c69·6379·3a20·2121·7374·7220·3c61·6262··licy:·!!str·<abb | ||
| 0003c | 0003c9f0:·7220·7469·746c·653d·2266·726f·6d20·5072··r·title="from·Pr | ||
| 0003c | 0003ca00:·6f66·696c·652f·7265·6669·6e65·2d76·616c··ofile/refine-val | ||
| 0003c | 0003ca10:·7565·3a20·7863·6364·665f·6f72·672e·7373··ue:·xccdf_org.ss | ||
| 0003c | 0003ca20:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 0003c | 0003ca30:·5f76·616c·7565·5f76·6172·5f73·7973·7465··_value_var_syste | ||
| 0003c | 0003ca40:·6d5f·6372·7970·746f·5f70·6f6c·6963·7922··m_crypto_policy" | ||
| 0003c | 0003ca50:·3e46·4950·533a·4f53·5050·3c2f·6162·6272··>FIPS:OSPP</abbr | ||
| 0003c | 0003ca60:·3e0a·2020·7461·6773·3a0a·2020·2020·2d20··>.··tags:.····-· | ||
| 0003c | 0003ca70:·616c·7761·7973·0a0a·2d20·6e61·6d65·3a20··always..-·name:· | ||
| 0003ca80:·456e·6162·6c65·2046·4950·5320·4d6f·6465··Enable·FIPS·Mode | |||
| 0003ca90:·202d·2043·6865·636b·2074·6f20·5365·6520···-·Check·to·See· | |||
| 0003caa0:·7468·6520·4375·7272·656e·7420·5374·6174··the·Current·Stat | |||
| 0003cab0:·7573·206f·6620·4649·5053·204d·6f64·650a··us·of·FIPS·Mode. | |||
| 0003cac0:·2020·616e·7369·626c·652e·6275·696c·7469····ansible.builti | |||
| 0003cad0:·6e2e·636f·6d6d·616e·643a·202f·7573·722f··n.command:·/usr/ | |||
| 0003cae0:·6269·6e2f·6669·7073·2d6d·6f64·652d·7365··bin/fips-mode-se | |||
| 0003caf0:·7475·7020·2d2d·6368·6563·6b0a·2020·7265··tup·--check.··re | |||
| 0003cb00:·6769·7374·6572·3a20·6973·5f66·6970·735f··gister:·is_fips_ | |||
| 0003cb10:·656e·6162·6c65·640a·2020·6661·696c·6564··enabled.··failed | |||
| 0003cb20:·5f77·6865·6e3a·2066·616c·7365·0a20·2063··_when:·false.··c | |||
| 0003cb30:·6861·6e67·6564·5f77·6865·6e3a·2066·616c··hanged_when:·fal | |||
| 0003cb40:·7365·0a20·2077·6865·6e3a·0a20·202d·2028··se.··when:.··-·( | |||
| 0003cb50:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003cb60:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003cb70:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003cb80:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003cb90:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003cba0:·696e·6572·225d·0a20·2020·2061·6e64·206e··iner"].····and·n | |||
| 0003cbb0:·6f74·2028·206c·6f6f·6b75·7028·2265·6e76··ot·(·lookup("env | |||
| 0003cbc0:·222c·2022·636f·6e74·6169·6e65·7222·2920··",·"container")· | |||
| 0003cbd0:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 0003cbe0:·6422·2029·2029·0a20·202d·2061·6e73·6962··d"·)·).··-·ansib | |||
| 0003cbf0:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003cc00:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003cc10:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003cc20:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003cc30:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003cc40:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 0003cc50:·542d·3830·302d·3533·2d43·4d2d·3328·3629··T-800-53-CM-3(6) | |||
| 0003cc60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003cc70:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 0003cc80:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 0003cc90:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003cca0:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 0003ccb0:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 0003ccc0:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 0003ccd0:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 0003cce0:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 0003ccf0:·656e·6162·6c65·5f66·6970·735f·6d6f·6465··enable_fips_mode | |||
| Max diff block lines reached; 1131039/1166283 bytes (96.98%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Protection·Profile·for·General·Purpose·Operating·Systems |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 187, 14 lines modified | Offset 187, 18 lines modified | ||
| 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 187 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 188 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 189 | ············_\x8i_\x8s_\x8m······1446 | 189 | ············_\x8i_\x8s_\x8m······1446 |
| 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 190 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 191 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 192 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 193 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 195 | [customizations] | ||
| 196 | fips·=·true | ||
| 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 198 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 199 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 200 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 201 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 199 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 202 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 200 | ··set_fact: | 203 | ··set_fact: |
| Offset 290, 18 lines modified | Offset 294, 14 lines modified | ||
| 290 | ··-·NIST-800-53-SC-13 | 294 | ··-·NIST-800-53-SC-13 |
| 291 | ··-·enable_fips_mode | 295 | ··-·enable_fips_mode |
| 292 | ··-·high_severity | 296 | ··-·high_severity |
| 293 | ··-·medium_complexity | 297 | ··-·medium_complexity |
| 294 | ··-·medium_disruption | 298 | ··-·medium_disruption |
| 295 | ··-·reboot_required | 299 | ··-·reboot_required |
| 296 | ··-·restrict_strategy | 300 | ··-·restrict_strategy |
| 297 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 298 | [customizations] | ||
| 299 | fips·=·true | ||
| 300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 301 | #·Remediation·is·applicable·only·in·certain·platforms | 302 | #·Remediation·is·applicable·only·in·certain·platforms |
| 302 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 303 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 303 | var_system_crypto_policy='FIPS:OSPP' | 304 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 339, 14 lines modified | Offset 339, 26 lines modified | ||
| 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: | 339 | The·crypto-policies·package·can·be·installed·with·the·following·command: |
| 340 | $·sudo·yum·install·crypto-policies | 340 | $·sudo·yum·install·crypto-policies |
| 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. | 341 | Rationale:··Centralized·cryptographic·policies·simplify·applying·secure·ciphers·across·an·operating·system·and·the·applications·that·run·on·that·operating·system.·Use·of·weak·or·untested·encryption·algorithms·undermines·the·purposes·of·utilizing·encryption·to·protect·data. |
| 342 | Severity: ··medium | 342 | Severity: ··medium |
| 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 343 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 344 | References:·_\x8o_\x8s_\x8p_\x8p···FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 345 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 347 | [[packages]] | ||
| 348 | name·=·"crypto-policies" | ||
| 349 | version·=·"*" | ||
| 350 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 351 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 352 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 353 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 354 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 355 | package·--add=crypto-policies | ||
| 346 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 356 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 347 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 357 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 348 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 358 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 349 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 359 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 350 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 360 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 351 | -·name:·Ensure·crypto-policies·is·installed | 361 | -·name:·Ensure·crypto-policies·is·installed |
| 352 | ··package: | 362 | ··package: |
| Offset 355, 47 lines modified | Offset 367, 35 lines modified | ||
| 355 | ··tags: | 367 | ··tags: |
| 356 | ··-·enable_strategy | 368 | ··-·enable_strategy |
| 357 | ··-·low_complexity | 369 | ··-·low_complexity |
| 358 | ··-·low_disruption | 370 | ··-·low_disruption |
| 359 | ··-·medium_severity | 371 | ··-·medium_severity |
| 360 | ··-·no_reboot_needed | 372 | ··-·no_reboot_needed |
| 361 | ··-·package_crypto-policies_installed | 373 | ··-·package_crypto-policies_installed |
| 362 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 363 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 364 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 365 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 366 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 367 | include·install_crypto-policies | ||
| 368 | class·install_crypto-policies·{ | ||
| 369 | ··package·{·'crypto-policies': | ||
| 370 | ····ensure·=>·'installed', | ||
| 371 | ··} | ||
| 372 | } | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 374 | [[packages]] | ||
| 375 | name·=·"crypto-policies" | ||
| 376 | version·=·"*" | ||
| 377 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 374 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 378 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 375 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 379 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 376 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 380 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 377 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 381 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 378 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 382 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 379 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 383 | ····yum·install·-y·"crypto-policies" | 380 | ····yum·install·-y·"crypto-policies" |
| 384 | fi | 381 | fi |
| 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 387 | include·install_crypto-policies | ||
| 388 | class·install_crypto-policies·{ | ||
| 390 | package· | 389 | ··package·{·'crypto-policies': |
| 390 | ····ensure·=>·'installed', | ||
| 391 | ··} | ||
| 392 | } | ||
| 391 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 393 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8og\x8gr\x8ra\x8ap\x8ph\x8hy\x8y·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Max diff block lines reached; 139937/146208 bytes (95.71%) of diff not shown. | |||
| Offset 14296, 15 lines modified | Offset 14296, 15 lines modified | ||
| 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037d70:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037d80:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037d90:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037da0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037db0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037dc0:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037dd0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037de0:·6f66·2032·3032·3 | 00037de0:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037df0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037e00:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037e10:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037e20:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037e30:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037e40:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037e50:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16376, 201 lines modified | Offset 16376, 201 lines modified | ||
| 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | 0003ff70:·612d·7461·7267·6574·3d22·2369·646d·3532··a-target="#idm52 | ||
| 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | 0003ff80:·3232·2220·7461·6269·6e64·6578·3d22·3022··22"·tabindex="0" | ||
| 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003ff90:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003ffa0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003ffb0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003ffc0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003ffd0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003ffe0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003ffe0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003fff0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040000:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040010:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040020:·6170·7365·2220·6964·3d22·6964·6d35·3232··apse"·id="idm522 | |||
| 00040030:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 00040040:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040050:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040060:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040070:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040080:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00040090:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000400a0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 000400b0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000400c0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 000400d0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 000400e0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 000400f0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 00040100:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 00040110:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00040120:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 00040130:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 00040140:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 00040150:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 00040160:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 00040170:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 00040180:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 00040190:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 000401a0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 000401b0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 000401c0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 000401d0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 000401e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 000401f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00040200:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 00040210:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 00040220:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 00040230:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 00040240:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 00040250:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 00040260:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 00040270:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 00040280:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 00040290:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 000402a0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 000402b0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 000402c0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 000402d0:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 000402e0:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 000402f0:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00040300:·743d·2223·6964·6d35·3232·3322·2074·6162··t="#idm5223"·tab | |||
| 00040310:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00040320:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00040330:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00040340:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00040350:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00040360:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 000 | 0003fff0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 00040 | 00040000:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 00040390:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000403a0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 000403b0:·3d22·6964·6d35·3232·3322·3e3c·7461·626c··="idm5223"><tabl | |||
| 000403c0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 000403d0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 000403e0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 000403f0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040400:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00040410:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040420:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00040430:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00040440:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040450:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040460:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00040470:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00040480:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00040490:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 000404a0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 000404b0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 000404c0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 000404d0:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 000404e0:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 000404f0:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 00040500:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 00040510:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 00040520:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00040530:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00040540:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00040550:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00040560:·7461·7267·6574·3d22·2369·646d·3532·3234··target="#idm5224 | |||
| 00040570:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00040580:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00040590:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 000405a0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 000405b0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 000405c0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 000405d0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 000405e0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 000405f0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040 | 00040010:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 00040 | 00040020:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 00040 | 00040030:·6964·3d22·6964·6d35·3232·3222·3e3c·7072··id="idm5222"><pr | ||
| 00040 | 00040040:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 00040 | 00040050:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | ||
| Max diff block lines reached; 743897/771413 bytes (96.43%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 40 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Oracle·Linux·9 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:oracle:linux:9 | 44 | ····*·cpe:/o:oracle:linux:9 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 408, 14 lines modified | Offset 408, 26 lines modified | ||
| 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 408 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 409 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 410 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 411 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 412 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 413 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 414 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 416 | [[packages]] | ||
| 417 | name·=·"aide" | ||
| 418 | version·=·"*" | ||
| 419 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 420 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 421 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 422 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 423 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 424 | package·--add=aide | ||
| 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 420 | -·name:·Ensure·aide·is·installed | 430 | -·name:·Ensure·aide·is·installed |
| 421 | ··package: | 431 | ··package: |
| Offset 429, 31 lines modified | Offset 441, 14 lines modified | ||
| 429 | ··-·PCI-DSSv4-11.5.2 | 441 | ··-·PCI-DSSv4-11.5.2 |
| 430 | ··-·enable_strategy | 442 | ··-·enable_strategy |
| 431 | ··-·low_complexity | 443 | ··-·low_complexity |
| 432 | ··-·low_disruption | 444 | ··-·low_disruption |
| 433 | ··-·medium_severity | 445 | ··-·medium_severity |
| 434 | ··-·no_reboot_needed | 446 | ··-·no_reboot_needed |
| 435 | ··-·package_aide_installed | 447 | ··-·package_aide_installed |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 441 | include·install_aide | ||
| 442 | class·install_aide·{ | ||
| 443 | ··package·{·'aide': | ||
| 444 | ····ensure·=>·'installed', | ||
| 445 | ··} | ||
| 446 | } | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 448 | [[packages]] | ||
| 449 | name·=·"aide" | ||
| 450 | version·=·"*" | ||
| 451 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 452 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 453 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 454 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 455 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 456 | #·Remediation·is·applicable·only·in·certain·platforms | 453 | #·Remediation·is·applicable·only·in·certain·platforms |
| 457 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 454 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 461, 21 lines modified | Offset 456, 26 lines modified | ||
| 461 | if·!·rpm·-q·--quiet·"aide"·;·then | 456 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 462 | ····yum·install·-y·"aide" | 457 | ····yum·install·-y·"aide" |
| 463 | fi | 458 | fi |
| 464 | else | 459 | else |
| 465 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 460 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 466 | fi | 461 | fi |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 462 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 463 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 464 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 465 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 466 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 467 | include·install_aide | ||
| 472 | 468 | class·install_aide·{ | |
| 469 | ··package·{·'aide': | ||
| 470 | ····ensure·=>·'installed', | ||
| 471 | ··} | ||
| 472 | } | ||
| 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 473 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 474 | Run·the·following·command·to·generate·a·new·database: | 474 | Run·the·following·command·to·generate·a·new·database: |
| 475 | $·sudo·/usr/sbin/aide·--init | 475 | $·sudo·/usr/sbin/aide·--init |
| 476 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 476 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 477 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 477 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 478 | To·initiate·a·manual·check,·run·the·following·command: | 478 | To·initiate·a·manual·check,·run·the·following·command: |
| 479 | $·sudo·/usr/sbin/aide·--check | 479 | $·sudo·/usr/sbin/aide·--check |
| Offset 2374, 14 lines modified | Offset 2374, 26 lines modified | ||
| 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed | 2374 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_sudo_installed |
| 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2375 | ············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2376 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2377 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2378 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2379 | ············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2380 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2382 | [[packages]] | ||
| 2383 | name·=·"sudo" | ||
| 2384 | version·=·"*" | ||
| 2385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2390 | package·--add=sudo | ||
| 2381 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2391 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2382 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2392 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2383 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2393 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2384 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2394 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2385 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2395 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2386 | -·name:·Ensure·sudo·is·installed | 2396 | -·name:·Ensure·sudo·is·installed |
| Max diff block lines reached; 97516/103449 bytes (94.26%) of diff not shown. | |||
| Offset 14285, 16 lines modified | Offset 14285, 16 lines modified | ||
| 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037cc0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037cd0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ce0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037cf0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037d00:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037d10:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037d20:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037d30:·2020·2020·2028·6173·206f·6620·3230·323 | 00037d30:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037d40:·2d30·3 | 00037d40:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037d50:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d60:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d70:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d80:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d90:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037da0:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037db0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 21040, 962 lines modified | Offset 21040, 962 lines modified | ||
| 000522f0:·6765·743d·2223·6964·6d31·3430·3035·2220··get="#idm14005"· | 000522f0:·6765·743d·2223·6964·6d31·3430·3035·2220··get="#idm14005"· | ||
| 00052300:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 00052300:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 00052310:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 00052310:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00052320:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00052320:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00052330:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00052330:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00052340:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00052340:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | Diff chunk too large, falling back to line-by-line diff (442 lines added, 442 lines removed) | |
| 00052350:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00052350:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00052360:·6e20·4 | 00052360:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 00052370:·7 | 00052370:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | ||
| 00052380:· | 00052380:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00052390:·6 | 00052390:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | ||
| 000523a0:· | 000523a0:·2220·6964·3d22·6964·6d31·3430·3035·223e··"·id="idm14005"> | ||
| 000523b0:·3 | 000523b0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 000523c0:· | 000523c0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 000523d0:·6 | 000523d0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 000523e0:· | 000523e0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| 000523f0:· | 000523f0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | ||
| 00052400:· | 00052400:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 00052410:· | 00052410:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00052420:· | 00052420:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 00052430:· | 00052430:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | ||
| 00052440:·6 | 00052440:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 00052450:·65 | 00052450:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 00052460:·6 | 00052460:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 00052470:·7 | 00052470:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 00052480:· | 00052480:·2f74·683e·3c74·643e·636f·6e66·6967·7572··/th><td>configur | ||
| 00052490:·6 | 00052490:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 000524a0:·3 | 000524a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | ||
| 000524b0:· | 000524b0:·6e61·6d65·3a20·5072·6576·656e·7420·4c6f··name:·Prevent·Lo | ||
| 000524c0:· | 000524c0:·6769·6e20·746f·2041·6363·6f75·6e74·7320··gin·to·Accounts· | ||
| 000524d0:· | 000524d0:·5769·7468·2045·6d70·7479·2050·6173·7377··With·Empty·Passw | ||
| 000524e0:·6f | 000524e0:·6f72·6420·2d20·4368·6563·6b20·6966·2073··ord·-·Check·if·s | ||
| 000524f0:· | 000524f0:·7973·7465·6d20·7265·6c69·6573·206f·6e0a··ystem·relies·on. | ||
| 00052500:· | 00052500:·2020·2020·6175·7468·7365·6c65·6374·0a20······authselect.· | ||
| 00052510:· | 00052510:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | ||
| 00052520:· | 00052520:·2e73·7461·743a·0a20·2020·2070·6174·683a··.stat:.····path: | ||
| 00052530:· | 00052530:·202f·7573·722f·6269·6e2f·6175·7468·7365···/usr/bin/authse | ||
| 00052540:· | 00052540:·6c65·6374·0a20·2072·6567·6973·7465·723a··lect.··register: | ||
| 00052550:·2 | 00052550:·2072·6573·756c·745f·6175·7468·7365·6c65···result_authsele | ||
| 00052560:· | 00052560:·6374·5f70·7265·7365·6e74·0a20·2077·6865··ct_present.··whe | ||
| 00052570:· | 00052570:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | ||
| 00052580:· | 00052580:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 00052590:· | 00052590:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 000525a0:· | 000525a0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 000525b0:· | 000525b0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 000525c0:· | 000525c0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 000525d0:· | 000525d0:·0a20·202d·2043·4a49·532d·352e·352e·320a··.··-·CJIS-5.5.2. | ||
| 000525e0:· | 000525e0:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | ||
| 000525f0:·2 | 000525f0:·2d33·2e31·2e31·0a20·202d·204e·4953·542d··-3.1.1.··-·NIST- | ||
| 00052600:·3 | 00052600:·3830·302d·3137·312d·332e·312e·350a·2020··800-171-3.1.5.·· | ||
| 00052610:· | 00052610:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 00052620:·2 | 00052620:·2d36·2861·290a·2020·2d20·4e49·5354·2d38··-6(a).··-·NIST-8 | ||
| 00052630:·3 | 00052630:·3030·2d35·332d·4941·2d35·2831·2928·6129··00-53-IA-5(1)(a) | ||
| 00052640:· | 00052640:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | ||
| 00052650:·2 | 00052650:·2d49·412d·3528·6329·0a20·202d·2050·4349··-IA-5(c).··-·PCI | ||
| 00052660:· | 00052660:·2d44·5353·2d52·6571·2d38·2e32·2e33·0a20··-DSS-Req-8.2.3.· | ||
| 00052670:·2 | 00052670:·202d·2050·4349·2d44·5353·7634·2d38·2e33···-·PCI-DSSv4-8.3 | ||
| 00052680:· | 00052680:·2e31·0a20·202d·2063·6f6e·6669·6775·7265··.1.··-·configure | ||
| 00052690:· | 00052690:·5f73·7472·6174·6567·790a·2020·2d20·6869··_strategy.··-·hi | ||
| 000526a0:· | 000526a0:·6768·5f73·6576·6572·6974·790a·2020·2d20··gh_severity.··-· | ||
| 000526b0:· | 000526b0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | ||
| 000526c0:· | 000526c0:·202d·206d·6564·6975·6d5f·6469·7372·7570···-·medium_disrup | ||
| 000526d0:· | 000526d0:·7469·6f6e·0a20·202d·206e·6f5f·656d·7074··tion.··-·no_empt | ||
| 000526e0:· | 000526e0:·795f·7061·7373·776f·7264·730a·2020·2d20··y_passwords.··-· | ||
| 000526f0:·6 | 000526f0:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | ||
| 00052700:· | 00052700:·0a0a·2d20·6e61·6d65·3a20·5072·6576·656e··..-·name:·Preven | ||
| 00052710:· | 00052710:·7420·4c6f·6769·6e20·746f·2041·6363·6f75··t·Login·to·Accou | ||
| 00052720:· | 00052720:·6e74·7320·5769·7468·2045·6d70·7479·2050··nts·With·Empty·P | ||
| 00052730:· | 00052730:·6173·7377·6f72·6420·2d20·5265·6d65·6469··assword·-·Remedi | ||
| 00052740:·6 | 00052740:·6174·6520·7573·696e·6720·6175·7468·7365··ate·using·authse | ||
| 00052750:· | 00052750:·6c65·6374·0a20·2062·6c6f·636b·3a0a·0a20··lect.··block:..· | ||
| 00052760:·2 | 00052760:·202d·206e·616d·653a·2050·7265·7665·6e74···-·name:·Prevent | ||
| 00052770:· | 00052770:·204c·6f67·696e·2074·6f20·4163·636f·756e···Login·to·Accoun | ||
| 00052780:· | 00052780:·7473·2057·6974·6820·456d·7074·7920·5061··ts·With·Empty·Pa | ||
| 00052790:·7 | 00052790:·7373·776f·7264·202d·2043·6865·636b·2069··ssword·-·Check·i | ||
| 000527a0:· | 000527a0:·6e74·6567·7269·7479·206f·6620·6175·7468··ntegrity·of·auth | ||
| 000527b0:· | 000527b0:·7365·6c65·6374·0a20·2020·2020·2063·7572··select.······cur | ||
| 000527c0:· | 000527c0:·7265·6e74·2070·726f·6669·6c65·0a20·2020··rent·profile.··· | ||
| 000527d0:· | 000527d0:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | ||
| 000527e0:· | 000527e0:·2e63·6f6d·6d61·6e64·3a0a·2020·2020·2020··.command:.······ | ||
| 000527f0:· | 000527f0:·636d·643a·2061·7574·6873·656c·6563·7420··cmd:·authselect· | ||
| 00052800:· | 00052800:·6368·6563·6b0a·2020·2020·7265·6769·7374··check.····regist | ||
| 00052810:·6 | 00052810:·6572·3a20·7265·7375·6c74·5f61·7574·6873··er:·result_auths | ||
| 00052820:· | 00052820:·656c·6563·745f·6368·6563·6b5f·636d·640a··elect_check_cmd. | ||
| 00052830:· | 00052830:·2020·2020·6368·616e·6765·645f·7768·656e······changed_when | ||
| 00052840:· | 00052840:·3a20·6661·6c73·650a·2020·2020·6661·696c··:·false.····fail | ||
| 00052850:· | 00052850:·6564·5f77·6865·6e3a·2066·616c·7365·0a0a··ed_when:·false.. | ||
| 00052860:· | 00052860:·2020·2d20·6e61·6d65·3a20·5072·6576·656e····-·name:·Preven | ||
| 00052870:· | 00052870:·7420·4c6f·6769·6e20·746f·2041·6363·6f75··t·Login·to·Accou | ||
| 00052880:· | 00052880:·6e74·7320·5769·7468·2045·6d70·7479·2050··nts·With·Empty·P | ||
| 00052890:· | 00052890:·6173·7377·6f72·6420·2d20·496e·666f·726d··assword·-·Inform | ||
| 000528a0:· | 000528a0:·6174·6976·6520·6d65·7373·6167·6520·6261··ative·message·ba | ||
| 000528b0:· | 000528b0:·7365·640a·2020·2020·2020·6f6e·2074·6865··sed.······on·the | ||
| 000528c0:· | 000528c0:·2061·7574·6873·656c·6563·7420·696e·7465···authselect·inte | ||
| 000528d0:· | 000528d0:·6772·6974·7920·6368·6563·6b20·7265·7375··grity·check·resu | ||
| 000528e0:· | 000528e0:·6c74·0a20·2020·2061·6e73·6962·6c65·2e62··lt.····ansible.b | ||
| 000528f0:· | 000528f0:·7569·6c74·696e·2e61·7373·6572·743a·0a20··uiltin.assert:.· | ||
| 00052900:· | 00052900:·2020·2020·2074·6861·743a·0a20·2020·2020·······that:.····· | ||
| 00052910:· | 00052910:·202d·2072·6573·756c·745f·6175·7468·7365···-·result_authse | ||
| 00052920:· | 00052920:·6c65·6374·5f63·6865·636b·5f63·6d64·2e72··lect_check_cmd.r | ||
| 00052930:·32 | 00052930:·6320·3d3d·2030·0a20·2020·2020·2066·6169··c·==·0.······fai | ||
| 00052940:· | 00052940:·6c5f·6d73·673a·0a20·2020·2020·202d·2061··l_msg:.······-·a | ||
| 00052950:· | 00052950:·7574·6873·656c·6563·7420·696e·7465·6772··uthselect·integr | ||
| 00052960:·6 | 00052960:·6974·7920·6368·6563·6b20·6661·696c·6564··ity·check·failed | ||
| 00052970:·2 | 00052970:·2e20·5265·6d65·6469·6174·696f·6e20·6162··.·Remediation·ab | ||
| 00052980:·6 | 00052980:·6f72·7465·6421·0a20·2020·2020·202d·2054··orted!.······-·T | ||
| 00052990:·68 | 00052990:·6869·7320·7265·6d65·6469·6174·696f·6e20··his·remediation· | ||
| 000529a0:· | 000529a0:·636f·756c·6420·6e6f·7420·6265·2061·7070··could·not·be·app | ||
| 000529b0:·6 | 000529b0:·6c69·6564·2062·6563·6175·7365·2061·6e20··lied·because·an· | ||
| Max diff block lines reached; 429294/492138 bytes (87.23%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·Oracle·Linux·9 |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:oracle:linux:9 | 42 | ····*·cpe:/o:oracle:linux:9 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 1095, 38 lines modified | Offset 1095, 14 lines modified | ||
| 1095 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 | 1095 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.10.1.1,·A.11.1.4,·A.11.1.5,·A.11.2.1,·A.13.1.1,·A.13.1.3,·A.13.2.1,·A.13.2.3,·A.13.2.4,·A.14.1.2,·A.14.1.3,·A.18.1.4,·A.6.1.2,·A.7.1.1,·A.7.1.2,·A.7.3.1,·A.8.2.2,·A.8.2.3,·A.9.1.1,·A.9.1.2,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.1,·A.9.4.2,·A.9.4.3,·A.9.4.4,·A.9.4.5 |
| 1096 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) | 1096 | ············_\x8n_\x8i_\x8s_\x8t···········IA-5(1)(a),·IA-5(c),·CM-6(a) |
| 1097 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 | 1097 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-4,·PR.AC-6,·PR.AC-7,·PR.DS-5 |
| 1098 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 | 1098 | ············_\x8o_\x8s_\x8p_\x8p···········FIA_UAU.1 |
| 1099 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 | 1099 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-8.2.3 |
| 1100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 1100 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 1101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 | 1101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········8.3.1 |
| 1102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1103 | --- | ||
| 1104 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1105 | kind:·MachineConfig | ||
| 1106 | spec: | ||
| 1107 | ··config: | ||
| 1108 | ····ignition: | ||
| 1109 | ······version:·3.1.0 | ||
| 1110 | ····storage: | ||
| 1111 | ······files: | ||
| 1112 | ······-·contents: | ||
| 1113 | ··········source: | ||
| 1114 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1115 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1116 | ········mode:·0644 | ||
| 1117 | ········path:·/etc/pam.d/password-auth | ||
| 1118 | ········overwrite:·true | ||
| 1119 | ······-·contents: | ||
| 1120 | ··········source: | ||
| 1121 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1122 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1123 | ········mode:·0644 | ||
| 1124 | ········path:·/etc/pam.d/system-auth | ||
| 1125 | ········overwrite:·true | ||
| 1126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1102 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1103 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1104 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1105 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure | 1106 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···configure |
| 1131 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on | 1107 | -·name:·Prevent·Login·to·Accounts·With·Empty·Password·-·Check·if·system·relies·on |
| 1132 | ····authselect | 1108 | ····authselect |
| Offset 1284, 14 lines modified | Offset 1260, 38 lines modified | ||
| 1284 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" | 1260 | ····sed·-i·-E·--follow-symlinks·"s/(.*password.*sufficient.*pam_unix.so.*)\snullok=?[[:alnum:]]*(.*)/\1\2/g"·"/etc/pam.d/password-auth" |
| 1285 | fi | 1261 | fi |
| 1286 | fi | 1262 | fi |
| 1287 | else | 1263 | else |
| 1288 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1264 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1289 | fi | 1265 | fi |
| 1266 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1267 | --- | ||
| 1268 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1269 | kind:·MachineConfig | ||
| 1270 | spec: | ||
| 1271 | ··config: | ||
| 1272 | ····ignition: | ||
| 1273 | ······version:·3.1.0 | ||
| 1274 | ····storage: | ||
| 1275 | ······files: | ||
| 1276 | ······-·contents: | ||
| 1277 | ··········source: | ||
| 1278 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1279 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1280 | ········mode:·0644 | ||
| 1281 | ········path:·/etc/pam.d/password-auth | ||
| 1282 | ········overwrite:·true | ||
| 1283 | ······-·contents: | ||
| 1284 | ··········source: | ||
| 1285 | data:,%23%20Generated%20by%20authselect%20on%20Sat%20Oct%2027%2014%3A59%3A36%202018%0A%23%20Do%20not%20modify%20this%20file%20manually.%0A%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_env.so%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_faildelay.so%20delay%3D2000000%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_fprintd.so%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet%0Aauth%20%20%20%20%20%20%20%20%5Bdefault%3D1%20ignore%3Dignore%20success%3Dok%5D%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20try_first_pass%0Aauth%20%20%20%20%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3E%3D%201000%20quiet_success%0Aauth%20%20%20%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20forward_pass%0Aauth%20%20%20%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_localuser.so%0Aaccount%20%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20uid%20%3C%201000%20quiet%0Aaccount%20%20%20%20%20%5Bdefault%3Dbad%20success%3Dok%20user_unknown%3Dignore%5D%20pam_sss.so%0Aaccount%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_permit.so%0A%0Apassword%20%20%20%20requisite%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_pwquality.so%20try_first_pass%20local_users_only%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%20sha512%20shadow%20try_first_pass%20use_authtok%0Apassword%20%20%20%20sufficient%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%20use_authtok%0Apassword%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_deny.so%0A%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_keyinit.so%20revoke%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_limits.so%0A- | ||
| 1286 | session%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_systemd.so%0Asession%20%20%20%20%20%5Bsuccess%3D1%20default%3Dignore%5D%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_succeed_if.so%20service%20in%20crond%20quiet%20use_uid%0Asession%20%20%20%20%20required%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_unix.so%0Asession%20%20%20%20%20optional%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20pam_sss.so%0A | ||
| 1287 | ········mode:·0644 | ||
| 1288 | ········path:·/etc/pam.d/system-auth | ||
| 1289 | ········overwrite:·true | ||
| 1290 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules | 1290 | Group ·Secure·Session·Configuration·Files·for·Login·Accounts· Group·contains·1·group·and·2·rules |
| 1291 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. | 1291 | _\x8[_\x8r_\x8e_\x8f_\x8] ·When·a·user·logs·into·a·Unix·account,·the·system·configures·the·user's·session·by·reading·a·number·of·files.·Many·of·these·files·are·located·in·the·user's·home·directory,·and·may·have·weak·permissions·as·a·result·of·user·error·or·misconfiguration.·If·an·attacker·can·modify·or·even·read·certain·types·of·account·configuration·information,·they·can·often·gain·full·access·to·the·affected·user's·account.·Therefore,·it·is·important·to·test·and·correct·configuration·file·permissions·for·interactive·accounts,·particularly·those·of·privileged·users·such·as·root·or·system·administrators. |
| 1292 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules | 1292 | Group ·Ensure·that·No·Dangerous·Directories·Exist·in·Root's·Path· Group·contains·2·rules |
| 1293 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: | 1293 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·active·path·of·the·root·account·can·be·obtained·by·starting·a·new·root·shell·and·running: |
| 1294 | #·echo·$PATH | 1294 | #·echo·$PATH |
| 1295 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. | 1295 | This·will·produce·a·colon-separated·list·of·directories·in·the·path. |
| Offset 1387, 14 lines modified | Offset 1387, 26 lines modified | ||
| 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 | 1387 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.3.9,·4.3.3.5.8,·4.3.4.4.7,·4.4.2.1,·4.4.2.2,·4.4.2.4 |
| 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 1388 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 1389 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 1390 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 1391 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 1392 | ············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 1393 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1395 | [[packages]] | ||
| 1396 | name·=·"rsyslog" | ||
| 1397 | version·=·"*" | ||
| 1398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1399 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1400 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1401 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1402 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1403 | package·--add=rsyslog | ||
| 1394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1404 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1405 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1406 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1407 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1408 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1399 | -·name:·Ensure·rsyslog·is·installed | 1409 | -·name:·Ensure·rsyslog·is·installed |
| 1400 | ··package: | 1410 | ··package: |
| Offset 1405, 31 lines modified | Offset 1417, 14 lines modified | ||
| 1405 | ··-·NIST-800-53-CM-6(a) | 1417 | ··-·NIST-800-53-CM-6(a) |
| 1406 | ··-·enable_strategy | 1418 | ··-·enable_strategy |
| 1407 | ··-·low_complexity | 1419 | ··-·low_complexity |
| 1408 | ··-·low_disruption | 1420 | ··-·low_disruption |
| 1409 | ··-·medium_severity | 1421 | ··-·medium_severity |
| 1410 | ··-·no_reboot_needed | 1422 | ··-·no_reboot_needed |
| Max diff block lines reached; 36701/58881 bytes (62.33%) of diff not shown. | |||
| Offset 14279, 16 lines modified | Offset 14279, 16 lines modified | ||
| 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037c60:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037c70:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037c80:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037c90:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ca0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037cb0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037cc0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037cd0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037cd0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037ce0:·2d30·3 | 00037ce0:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037cf0:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037d00:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037d10:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037d20:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037d30:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037d40:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037d50:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15061, 200 lines modified | Offset 15061, 200 lines modified | ||
| 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | 0003ad40:·2d74·6172·6765·743d·2223·6964·6d35·3232··-target="#idm522 | ||
| 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003ad50:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003ad60:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003ad70:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003ad80:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003ad90:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003ada0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003adb0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003adc0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003add0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ade0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003adf0:·7073·6522·2069·643d·2269·646d·3532·3232··pse"·id="idm5222 | |||
| 0003ae00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003ae10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003ae20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003ae30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003ae40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003ae50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003ae60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003ae70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003ae80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003ae90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003aea0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003aeb0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003aec0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003aed0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003aee0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003aef0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003af00:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003af10:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003af20:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003af30:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003af40:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003af50:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003af60:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003af70:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003af80:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003af90:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003afa0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003afb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003afc0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003afd0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003afe0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003aff0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b000:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b010:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b020:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b030:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b040:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b050:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b060:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b070:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b080:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b090:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b0a0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b0b0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b0c0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b0d0:·3d22·2369·646d·3532·3233·2220·7461·6269··="#idm5223"·tabi | |||
| 0003b0e0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b0f0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b100:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b110:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b120:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b130:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 0003b140:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b150:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b160:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b170:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b180:·2269·646d·3532·3233·223e·3c74·6162·6c65··"idm5223"><table | |||
| 0003b190:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b1a0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b1b0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b1c0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b1d0:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b1e0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b1f0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003b200:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b210:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b220:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b230:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b240:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b250:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0003b260:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003b270:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b280:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 0003b290:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 0003b2a0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 0003b2b0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 0003b2c0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 0003b2d0:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 0003b2e0:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 0003b2f0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b300:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b310:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b320:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b330:·6172·6765·743d·2223·6964·6d35·3232·3422··arget="#idm5224" | |||
| 0003b340:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b350:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b360:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b370:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b380:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b390:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003 | 0003adb0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003 | 0003adc0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 0003 | 0003add0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 0003ade0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 0003adf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 0003ae00:·643d·2269·646d·3532·3232·223e·3c70·7265··d="idm5222"><pre | ||
| 0003 | 0003ae10:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003 | 0003ae20:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | ||
| Max diff block lines reached; 2694828/2722344 bytes (98.99%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 37 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Oracle·Linux·9 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:oracle:linux:9 | 41 | ····*·cpe:/o:oracle:linux:9 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 98, 14 lines modified | Offset 98, 26 lines modified | ||
| 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 98 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 99 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 100 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 101 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 102 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 103 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 104 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 106 | [[packages]] | ||
| 107 | name·=·"aide" | ||
| 108 | version·=·"*" | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 114 | package·--add=aide | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 110 | -·name:·Ensure·aide·is·installed | 120 | -·name:·Ensure·aide·is·installed |
| 111 | ··package: | 121 | ··package: |
| Offset 119, 31 lines modified | Offset 131, 14 lines modified | ||
| 119 | ··-·PCI-DSSv4-11.5.2 | 131 | ··-·PCI-DSSv4-11.5.2 |
| 120 | ··-·enable_strategy | 132 | ··-·enable_strategy |
| 121 | ··-·low_complexity | 133 | ··-·low_complexity |
| 122 | ··-·low_disruption | 134 | ··-·low_disruption |
| 123 | ··-·medium_severity | 135 | ··-·medium_severity |
| 124 | ··-·no_reboot_needed | 136 | ··-·no_reboot_needed |
| 125 | ··-·package_aide_installed | 137 | ··-·package_aide_installed |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | include·install_aide | ||
| 132 | class·install_aide·{ | ||
| 133 | ··package·{·'aide': | ||
| 134 | ····ensure·=>·'installed', | ||
| 135 | ··} | ||
| 136 | } | ||
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | [[packages]] | ||
| 139 | name·=·"aide" | ||
| 140 | version·=·"*" | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 146 | #·Remediation·is·applicable·only·in·certain·platforms | 143 | #·Remediation·is·applicable·only·in·certain·platforms |
| 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 144 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 151, 21 lines modified | Offset 146, 26 lines modified | ||
| 151 | if·!·rpm·-q·--quiet·"aide"·;·then | 146 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 152 | ····yum·install·-y·"aide" | 147 | ····yum·install·-y·"aide" |
| 153 | fi | 148 | fi |
| 154 | else | 149 | else |
| 155 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 156 | fi | 151 | fi |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | include·install_aide | ||
| 162 | 158 | class·install_aide·{ | |
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 164 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 164 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 165 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 165 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 166 | Severity: ··medium | 166 | Severity: ··medium |
| 167 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 167 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 168 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 168 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 169 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 169 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1690, 14 lines modified | Offset 1690, 18 lines modified | ||
| 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1690 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1691 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1692 | ············_\x8i_\x8s_\x8m······1446 | 1692 | ············_\x8i_\x8s_\x8m······1446 |
| 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1693 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1694 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1695 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1696 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1698 | [customizations] | ||
| 1699 | fips·=·true | ||
| 1697 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1700 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1698 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1701 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1699 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1702 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1700 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1703 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1701 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1704 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1702 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1705 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1703 | ··set_fact: | 1706 | ··set_fact: |
| Offset 1793, 18 lines modified | Offset 1797, 14 lines modified | ||
| 1793 | ··-·NIST-800-53-SC-13 | 1797 | ··-·NIST-800-53-SC-13 |
| 1794 | ··-·enable_fips_mode | 1798 | ··-·enable_fips_mode |
| 1795 | ··-·high_severity | 1799 | ··-·high_severity |
| 1796 | ··-·medium_complexity | 1800 | ··-·medium_complexity |
| 1797 | ··-·medium_disruption | 1801 | ··-·medium_disruption |
| 1798 | ··-·reboot_required | 1802 | ··-·reboot_required |
| Max diff block lines reached; 265183/271914 bytes (97.52%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·303 | 00037e50:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15079, 200 lines modified | Offset 15079, 200 lines modified | ||
| 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | 0003ae60:·6765·743d·2223·6964·6d35·3232·3222·2074··get="#idm5222"·t | ||
| 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003ae70:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003ae80:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003ae90:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003aea0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003aeb0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003aec0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003aed0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003aee0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003aef0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003af00:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af10:·2069·643d·2269·646d·3532·3232·223e·3c74···id="idm5222"><t | |||
| 0003af20:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003af30:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003af40:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003af50:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003af60:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003af70:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003af80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003af90:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003afa0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003afb0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003afc0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003afd0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003afe0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003aff0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b000:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b010:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b020:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b030:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b040:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b050:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b060:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b070:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b080:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b090:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b0a0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b0b0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b0c0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b0d0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b0e0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b0f0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b100:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b110:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b120:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b130:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b140:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b150:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b160:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b170:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b180:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b190:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b1a0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b1b0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b1c0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b1d0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b1e0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b1f0:·646d·3532·3233·2220·7461·6269·6e64·6578··dm5223"·tabindex | |||
| 0003b200:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b210:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b220:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b230:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b240:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b250:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b260:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b270:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b280:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b290:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b2a0:·3532·3233·223e·3c74·6162·6c65·2063·6c61··5223"><table·cla | |||
| 0003b2b0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b2c0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b2d0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b2e0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b2f0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b300:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b310:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b320:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b330:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b340:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b350:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b360:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b370:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b380:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b390:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b3a0:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b3b0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b3c0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b3d0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b3e0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b3f0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b400:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b410:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b420:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b430:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b440:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b450:·743d·2223·6964·6d35·3232·3422·2074·6162··t="#idm5224"·tab | |||
| 0003b460:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b470:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b480:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b490:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b4a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b4b0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003 | 0003aed0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003 | 0003aee0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003aef0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003af00:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003af10:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003 | 0003af20:·646d·3532·3232·223e·3c70·7265·3e3c·636f··dm5222"><pre><co | ||
| 0003 | 0003af30:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | ||
| 0003 | 0003af40:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | ||
| Max diff block lines reached; 2661236/2688752 bytes (98.98%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·with·GUI·for·Oracle·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:oracle:linux:9 | 46 | ····*·cpe:/o:oracle:linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 14 lines modified | Offset 102, 26 lines modified | ||
| 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 102 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | [[packages]] | ||
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package·--add=aide | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 114 | -·name:·Ensure·aide·is·installed | 124 | -·name:·Ensure·aide·is·installed |
| 115 | ··package: | 125 | ··package: |
| Offset 123, 31 lines modified | Offset 135, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 135 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 136 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 137 | ··-·low_complexity |
| 126 | ··-·low_disruption | 138 | ··-·low_disruption |
| 127 | ··-·medium_severity | 139 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 140 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 141 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | } | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | #·Remediation·is·applicable·only·in·certain·platforms | 147 | #·Remediation·is·applicable·only·in·certain·platforms |
| 151 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 148 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 155, 21 lines modified | Offset 150, 26 lines modified | ||
| 155 | if·!·rpm·-q·--quiet·"aide"·;·then | 150 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 156 | ····yum·install·-y·"aide" | 151 | ····yum·install·-y·"aide" |
| 157 | fi | 152 | fi |
| 158 | else | 153 | else |
| 159 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 154 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 160 | fi | 155 | fi |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | include·install_aide | ||
| 166 | 162 | class·install_aide·{ | |
| 163 | ··package·{·'aide': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 167 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 168 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 168 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 169 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 169 | Rationale:··Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 170 | Severity: ··medium | 170 | Severity: ··medium |
| 171 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 171 | Rule·ID:····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 172 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 172 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| 173 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 | 173 | References:·_\x8n_\x8i_\x8s_\x8t···AU-9(3),·AU-9(3).1 |
| Offset 1694, 14 lines modified | Offset 1694, 18 lines modified | ||
| 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1694 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1695 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1696 | ············_\x8i_\x8s_\x8m······1446 | 1696 | ············_\x8i_\x8s_\x8m······1446 |
| 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1697 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1698 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1699 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1700 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1702 | [customizations] | ||
| 1703 | fips·=·true | ||
| 1701 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1704 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1702 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1705 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1703 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1706 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1704 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1707 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1705 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1708 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1706 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1709 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1707 | ··set_fact: | 1710 | ··set_fact: |
| Offset 1797, 18 lines modified | Offset 1801, 14 lines modified | ||
| 1797 | ··-·NIST-800-53-SC-13 | 1801 | ··-·NIST-800-53-SC-13 |
| 1798 | ··-·enable_fips_mode | 1802 | ··-·enable_fips_mode |
| 1799 | ··-·high_severity | 1803 | ··-·high_severity |
| 1800 | ··-·medium_complexity | 1804 | ··-·medium_complexity |
| 1801 | ··-·medium_disruption | 1805 | ··-·medium_disruption |
| 1802 | ··-·reboot_required | 1806 | ··-·reboot_required |
| Max diff block lines reached; 258386/265132 bytes (97.46%) of diff not shown. | |||
| Offset 14324, 15 lines modified | Offset 14324, 15 lines modified | ||
| 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037f30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037f40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037fa0:·206f·6620·3230·323 | 00037fa0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037fc0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037fd0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037fe0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ff0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00038000:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00038010:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15093, 118 lines modified | Offset 15093, 118 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | 0003af40:·6765·743d·2223·6964·6d31·3036·3522·2074··get="#idm1065"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003af | 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b000:·646d·3130·3635·223e·3c70·7265·3e3c·636f··dm1065"><pre><co | |||
| 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | |||
| 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | |||
| 0003b030:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0003b040:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b0 | 0003b050:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 0003b060:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b070:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b080:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b090:·6964·6d31·3036·3622·2074·6162·696e·6465··idm1066"·tabinde | |||
| 0003b0a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b0b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b0c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b0d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b0e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b0f0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b0d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·434a··].··tags:.··-·CJ | |||
| 0003b1b0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1c0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1d0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1e0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b1f0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b200:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b210:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b220:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b230:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b240:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b250:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b260:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b270:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b280:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b290:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2a0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2b0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2c0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2d0:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | |||
| 0003b2e0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b2f0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b300:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b310:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b320:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b330:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b | 0003b100:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0003b | 0003b110:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003b | 0003b120:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003b3 | 0003b130:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b140:·646d·3130·3636·223e·3c74·6162·6c65·2063··dm1066"><table·c | ||
| 0003b | 0003b150:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0003b | 0003b160:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0003b | 0003b170:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0003b | 0003b180:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0003b | 0003b190:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0003b | 0003b1a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003b1c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003b1d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003b1e0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003b | 0003b1f0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | ||
| 0003b | 0003b200:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003b | 0003b210:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | ||
| 0003b | 0003b220:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 0003b | 0003b230:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | ||
| 0003b240:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b250:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b260:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b270:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b280:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b290:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b2a0:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b2b0:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| Max diff block lines reached; 583110/599172 bytes (97.32%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:openembedded:harden: | 44 | ····*·cpe:/o:openembedded:harden: |
| 45 | ····*·cpe:/o:openembedded:nodistro: | 45 | ····*·cpe:/o:openembedded:nodistro: |
| 46 | ····*·cpe:/o:openembedded:petalinux: | 46 | ····*·cpe:/o:openembedded:petalinux: |
| 47 | ····*·cpe:/o:openembedded:poky: | 47 | ····*·cpe:/o:openembedded:poky: |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 120, 14 lines modified | Offset 120, 19 lines modified | ||
| 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 120 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 121 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 122 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | [[packages]] | ||
| 129 | name·=·"aide" | ||
| 130 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 132 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 133 | ··package: | 137 | ··package: |
| Offset 153, 19 lines modified | Offset 158, 14 lines modified | ||
| 153 | include·install_aide | 158 | include·install_aide |
| 154 | class·install_aide·{ | 159 | class·install_aide·{ |
| 155 | ··package·{·'aide': | 160 | ··package·{·'aide': |
| 156 | ····ensure·=>·'installed', | 161 | ····ensure·=>·'installed', |
| 157 | ··} | 162 | ··} |
| 158 | } | 163 | } |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | [[packages]] | ||
| 161 | name·=·"aide" | ||
| 162 | version·=·"*" | ||
| 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 164 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 164 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 165 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 165 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 166 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 166 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 167 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 167 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 168 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 168 | crontab: | 169 | crontab: |
| 169 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 170 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 4264, 14 lines modified | Offset 4264, 19 lines modified | ||
| 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 4264 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 4265 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 4266 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 4267 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 4268 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 4269 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 4270 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4272 | [[packages]] | ||
| 4273 | name·=·"firewalld" | ||
| 4274 | version·=·"*" | ||
| 4271 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4275 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4272 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4276 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4273 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4277 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4274 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4278 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4275 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4279 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4276 | -·name:·Ensure·firewalld·is·installed | 4280 | -·name:·Ensure·firewalld·is·installed |
| 4277 | ··package: | 4281 | ··package: |
| Offset 4295, 19 lines modified | Offset 4300, 14 lines modified | ||
| 4295 | include·install_firewalld | 4300 | include·install_firewalld |
| 4296 | class·install_firewalld·{ | 4301 | class·install_firewalld·{ |
| 4297 | ··package·{·'firewalld': | 4302 | ··package·{·'firewalld': |
| 4298 | ····ensure·=>·'installed', | 4303 | ····ensure·=>·'installed', |
| 4299 | ··} | 4304 | ··} |
| 4300 | } | 4305 | } |
| 4301 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4302 | [[packages]] | ||
| 4303 | name·=·"firewalld" | ||
| 4304 | version·=·"*" | ||
| 4305 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·f\x8fi\x8ir\x8re\x8ew\x8wa\x8al\x8ll\x8ld\x8d·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 4306 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·f\x8fi\x8ir\x8re\x8ew\x8wa\x8al\x8ll\x8ld\x8d·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 4306 | The·firewalld·service·can·be·enabled·with·the·following·command: | 4307 | The·firewalld·service·can·be·enabled·with·the·following·command: |
| 4307 | $·sudo·systemctl·enable·firewalld.service | 4308 | $·sudo·systemctl·enable·firewalld.service |
| 4308 | ············Access·control·methods·provide·the·ability·to·enhance·system·security·posture·by | 4309 | ············Access·control·methods·provide·the·ability·to·enhance·system·security·posture·by |
| 4309 | Rationale:··restricting·services·and·known·good·IP·addresses·and·address·ranges.·This·prevents | 4310 | Rationale:··restricting·services·and·known·good·IP·addresses·and·address·ranges.·This·prevents |
| 4310 | ············connections·from·unknown·hosts·and·protocols. | 4311 | ············connections·from·unknown·hosts·and·protocols. |
| 4311 | Severity: ··medium | 4312 | Severity: ··medium |
| Offset 4322, 14 lines modified | Offset 4322, 18 lines modified | ||
| 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 4322 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 4323 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 4324 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 4325 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 4326 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 4327 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 4328 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4330 | [customizations.services] | ||
| 4331 | enabled·=·["firewalld"] | ||
| 4329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 4332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 4330 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 4333 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 4331 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 4334 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 4332 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 4335 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 4333 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 4336 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 4334 | -·name:·Gather·the·package·facts | 4337 | -·name:·Gather·the·package·facts |
| 4335 | ··package_facts: | 4338 | ··package_facts: |
| Offset 4392, 18 lines modified | Offset 4396, 14 lines modified | ||
| 4392 | class·enable_firewalld·{ | 4396 | class·enable_firewalld·{ |
| 4393 | ··service·{'firewalld': | 4397 | ··service·{'firewalld': |
| 4394 | ····enable·=>·true, | 4398 | ····enable·=>·true, |
| 4395 | ····ensure·=>·'running', | 4399 | ····ensure·=>·'running', |
| 4396 | ··} | 4400 | ··} |
| 4397 | } | 4401 | } |
| 4398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 4399 | [customizations.services] | ||
| 4400 | enabled·=·["firewalld"] | ||
| 4401 | Group ·iptables·and·ip6tables· Group·contains·1·rule | 4402 | Group ·iptables·and·ip6tables· Group·contains·1·rule |
| Max diff block lines reached; 38127/44122 bytes (86.41%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037ee0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ef0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037f00:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037f10:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037f20:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037f30:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037f40:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037f50:·206f·6620·3230·323 | 00037f50:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f70:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f80:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f90:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037fa0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037fb0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037fc0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15088, 118 lines modified | Offset 15088, 118 lines modified | ||
| 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | 0003aef0:·6574·3d22·2369·646d·3130·3635·2220·7461··et="#idm1065"·ta | ||
| 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003af00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003af10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003af20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003af30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003af40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003af50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003af60:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003af60:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003af70:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003af80:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003af90:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003afa0:·6964·3d22·6964·6d31·3036·3522·3e3c·7461··id="idm1065"><ta | |||
| 0003afb0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003afc0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003afd0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003afe0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003aff0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b000:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b010:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b020:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b030:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b040:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b050:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b060:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b070:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b080:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b090:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b0a0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b0b0:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b0c0:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b0d0:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b0e0:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b0f0:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b100:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b110:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b120:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b130:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b140:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b150:·0a20·2074·6167·733a·0a20·202d·2043·4a49··.··tags:.··-·CJI | |||
| 0003b160:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b170:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b180:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b190:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b1a0:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b1b0:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b1c0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b1d0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b1e0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b1f0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b200:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b210:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b220:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b230:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b240:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b250:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b260:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b270:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b280:·6d31·3036·3622·2074·6162·696e·6465·783d··m1066"·tabindex= | |||
| 0003b290:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b2a0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b2b0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b2c0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b2d0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b2e0:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003 | 0003af70:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003 | 0003af80:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003 | 0003af90:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003 | 0003afa0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003afb0:·6d31·3036·3522·3e3c·7072·653e·3c63·6f64··m1065"><pre><cod | |||
| 0003afc0:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003afd0:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003afe0:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003b330:·3036·3622·3e3c·7461·626c·6520·636c·6173··066"><table·clas | |||
| 0003b340:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b350:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b360:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b370:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b380:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b390:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3a0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b3b0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b3d0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b3e0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b3f0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b400:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b420:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b430:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b440:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b450:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b460:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b470:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b480:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003 | 0003aff0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0003b | 0003b000:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0003b | 0003b010:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0003b | 0003b020:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0003b | 0003b030:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b | 0003b040:·646d·3130·3636·2220·7461·6269·6e64·6578··dm1066"·tabindex | ||
| 0003b | 0003b050:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b | 0003b060:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b | 0003b070:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b | 0003b080:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b | 0003b090:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b0a0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | |||
| 0003b540:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b550:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b | 0003b0b0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003b | 0003b0c0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| Max diff block lines reached; 582972/599034 bytes (97.32%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openembedded:harden: | 42 | ····*·cpe:/o:openembedded:harden: |
| 43 | ····*·cpe:/o:openembedded:nodistro: | 43 | ····*·cpe:/o:openembedded:nodistro: |
| 44 | ····*·cpe:/o:openembedded:petalinux: | 44 | ····*·cpe:/o:openembedded:petalinux: |
| 45 | ····*·cpe:/o:openembedded:poky: | 45 | ····*·cpe:/o:openembedded:poky: |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 118, 14 lines modified | Offset 118, 19 lines modified | ||
| 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 118 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 119 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 120 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 123 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 135 | ··package: |
| Offset 151, 19 lines modified | Offset 156, 14 lines modified | ||
| 151 | include·install_aide | 156 | include·install_aide |
| 152 | class·install_aide·{ | 157 | class·install_aide·{ |
| 153 | ··package·{·'aide': | 158 | ··package·{·'aide': |
| 154 | ····ensure·=>·'installed', | 159 | ····ensure·=>·'installed', |
| 155 | ··} | 160 | ··} |
| 156 | } | 161 | } |
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·P\x8Pe\x8er\x8ri\x8io\x8od\x8di\x8ic\x8c·E\x8Ex\x8xe\x8ec\x8cu\x8ut\x8ti\x8io\x8on\x8n·o\x8of\x8f·A\x8AI\x8ID\x8DE\x8E·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 162 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of | 163 | At·a·minimum,·AIDE·should·be·configured·to·run·a·weekly·scan.·To·implement·a·daily·execution·of |
| 163 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: | 164 | AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/crontab: |
| 164 | 05·4·*·*·*·root·/usr/sbin/aide·--check | 165 | 05·4·*·*·*·root·/usr/sbin/aide·--check |
| 165 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ | 166 | To·implement·a·weekly·execution·of·AIDE·at·4:05am·using·cron,·add·the·following·line·to·/etc/ |
| 166 | crontab: | 167 | crontab: |
| 167 | 05·4·*·*·0·root·/usr/sbin/aide·--check | 168 | 05·4·*·*·0·root·/usr/sbin/aide·--check |
| Offset 3828, 14 lines modified | Offset 3828, 19 lines modified | ||
| 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed | 3828 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_firewalld_installed |
| 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 | 3829 | ············_\x8d_\x8i_\x8s_\x8a····CCI-002314 |
| 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 3830 | ············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 | 3831 | References:·_\x8o_\x8s_\x8p_\x8p····FMT_SMF_EXT.1 |
| 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, | 3832 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000298-GPOS-00116, |
| 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 | 3833 | ····················SRG-OS-000480-GPOS-00227,·SRG-OS-000480-GPOS-00232 |
| 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 | 3834 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·1.2.1 |
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3836 | [[packages]] | ||
| 3837 | name·=·"firewalld" | ||
| 3838 | version·=·"*" | ||
| 3835 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3836 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3840 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3837 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3841 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3838 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3842 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3839 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3843 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3840 | -·name:·Ensure·firewalld·is·installed | 3844 | -·name:·Ensure·firewalld·is·installed |
| 3841 | ··package: | 3845 | ··package: |
| Offset 3859, 19 lines modified | Offset 3864, 14 lines modified | ||
| 3859 | include·install_firewalld | 3864 | include·install_firewalld |
| 3860 | class·install_firewalld·{ | 3865 | class·install_firewalld·{ |
| 3861 | ··package·{·'firewalld': | 3866 | ··package·{·'firewalld': |
| 3862 | ····ensure·=>·'installed', | 3867 | ····ensure·=>·'installed', |
| 3863 | ··} | 3868 | ··} |
| 3864 | } | 3869 | } |
| 3865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3866 | [[packages]] | ||
| 3867 | name·=·"firewalld" | ||
| 3868 | version·=·"*" | ||
| 3869 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·f\x8fi\x8ir\x8re\x8ew\x8wa\x8al\x8ll\x8ld\x8d·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3870 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·f\x8fi\x8ir\x8re\x8ew\x8wa\x8al\x8ll\x8ld\x8d·E\x8En\x8na\x8ab\x8bl\x8le\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3870 | The·firewalld·service·can·be·enabled·with·the·following·command: | 3871 | The·firewalld·service·can·be·enabled·with·the·following·command: |
| 3871 | $·sudo·systemctl·enable·firewalld.service | 3872 | $·sudo·systemctl·enable·firewalld.service |
| 3872 | ············Access·control·methods·provide·the·ability·to·enhance·system·security·posture·by | 3873 | ············Access·control·methods·provide·the·ability·to·enhance·system·security·posture·by |
| 3873 | Rationale:··restricting·services·and·known·good·IP·addresses·and·address·ranges.·This·prevents | 3874 | Rationale:··restricting·services·and·known·good·IP·addresses·and·address·ranges.·This·prevents |
| 3874 | ············connections·from·unknown·hosts·and·protocols. | 3875 | ············connections·from·unknown·hosts·and·protocols. |
| 3875 | Severity: ··medium | 3876 | Severity: ··medium |
| Offset 3886, 14 lines modified | Offset 3886, 18 lines modified | ||
| 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 | 3886 | ············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·······CIP-003-8·R4,·CIP-003-8·R5,·CIP-004-6·R3 |
| 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) | 3887 | ············_\x8n_\x8i_\x8s_\x8t···········AC-4,·CM-7(b),·CA-3(5),·SC-7(21),·CM-6(a) |
| 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 | 3888 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1 |
| 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 | 3889 | ············_\x8o_\x8s_\x8p_\x8p···········FMT_SMF_EXT.1 |
| 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- | 3890 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000096-GPOS-00050,·SRG-OS-000297-GPOS-00115,·SRG-OS-000480-GPOS- |
| 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 | 3891 | ···························00227,·SRG-OS-000480-GPOS-00231,·SRG-OS-000480-GPOS-00232 |
| 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 | 3892 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········1.2.1 |
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3894 | [customizations.services] | ||
| 3895 | enabled·=·["firewalld"] | ||
| 3893 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3896 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3894 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3897 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3895 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3898 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3896 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3899 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3897 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3900 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3898 | -·name:·Gather·the·package·facts | 3901 | -·name:·Gather·the·package·facts |
| 3899 | ··package_facts: | 3902 | ··package_facts: |
| Offset 3956, 18 lines modified | Offset 3960, 14 lines modified | ||
| 3956 | class·enable_firewalld·{ | 3960 | class·enable_firewalld·{ |
| 3957 | ··service·{'firewalld': | 3961 | ··service·{'firewalld': |
| 3958 | ····enable·=>·true, | 3962 | ····enable·=>·true, |
| 3959 | ····ensure·=>·'running', | 3963 | ····ensure·=>·'running', |
| 3960 | ··} | 3964 | ··} |
| 3961 | } | 3965 | } |
| 3962 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3963 | [customizations.services] | ||
| 3964 | enabled·=·["firewalld"] | ||
| 3965 | Group ·iptables·and·ip6tables· Group·contains·1·rule | 3966 | Group ·iptables·and·ip6tables· Group·contains·1·rule |
| Max diff block lines reached; 38002/43997 bytes (86.37%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037ec0:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037ed0:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ee0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ef0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f00:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f10:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2028·6173·206f·6620·3230·323 | 00037f30:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037f40:·323 | 00037f40:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f50:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f60:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f70:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f80:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f90:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037fa0:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037fb0:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15113, 119 lines modified | Offset 15113, 119 lines modified | ||
| 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b080:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | 0003b090:·6d31·3132·3322·2074·6162·696e·6465·783d··m1123"·tabindex= | ||
| 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b0a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b0b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b0c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b0d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b0e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b0f0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b100:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b110:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b120:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b130:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b140:·3131·3233·223e·3c74·6162·6c65·2063·6c61··1123"><table·cla | |||
| 0003b150:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b160:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b170:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b180:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b190:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b1c0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b1d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b1e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b1f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b200:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b210:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b220:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b230:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b240:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b250:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b260:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b270:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b280:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b290:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2a0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2b0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b2c0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b2d0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b2e0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b2f0:·3a0a·2020·2d20·434a·4953·2d35·2e31·302e··:.··-·CJIS-5.10. | |||
| 0003b300:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 0003b310:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b320:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b330:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b340:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b350:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b360:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 0003b370:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 0003b380:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 0003b390:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 0003b3a0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 0003b3b0:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 0003b3c0:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 0003b3d0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b3e0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b3f0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b400:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b410:·7267·6574·3d22·2369·646d·3131·3234·2220··rget="#idm1124"· | |||
| 0003b420:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b430:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b440:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b450:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b460:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b470:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b480:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 0003b490:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b4a0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b4b0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b4c0:·2069·643d·2269·646d·3131·3234·223e·3c74···id="idm1124"><t | |||
| 0003b4d0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b4e0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b4f0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b500:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b510:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b520:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b530:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b540:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b550:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b560:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b570:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b580:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b590:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b5a0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b5b0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b5c0:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 0003b5d0:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 0003b5e0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 0003b5f0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 0003b600:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 0003b610:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003b620:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003b630:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b640:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b650:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b660:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003b670:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | |||
| 0003b680:·3132·3522·2074·6162·696e·6465·783d·2230··125"·tabindex="0 | |||
| 0003b690:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b6a0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b6b0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b6c0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b6d0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b | 0003b0f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b | 0003b100:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b | 0003b110:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0003b | 0003b120:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0003b | 0003b130:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0003b | 0003b140:·6522·2069·643d·2269·646d·3131·3233·223e··e"·id="idm1123"> | ||
| 0003b | 0003b150:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 0003b | 0003b160:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | ||
| Max diff block lines reached; 572688/589026 bytes (97.23%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server | 42 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server |
| 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server | 43 | ····*·cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server |
| 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server | 44 | ····*·cpe:/o:openEuler:openEuler:22.03LTS:ga:server |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 122 | ···························A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 123 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 124 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 155, 19 lines modified | Offset 160, 14 lines modified | ||
| 155 | include·install_aide | 160 | include·install_aide |
| 156 | class·install_aide·{ | 161 | class·install_aide·{ |
| 157 | ··package·{·'aide': | 162 | ··package·{·'aide': |
| 158 | ····ensure·=>·'installed', | 163 | ····ensure·=>·'installed', |
| 159 | ··} | 164 | ··} |
| 160 | } | 165 | } |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | [[packages]] | ||
| 163 | name·=·"aide" | ||
| 164 | version·=·"*" | ||
| 165 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 166 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 166 | Run·the·following·command·to·generate·a·new·database: | 167 | Run·the·following·command·to·generate·a·new·database: |
| 167 | $·sudo·/usr/sbin/aide·--init | 168 | $·sudo·/usr/sbin/aide·--init |
| 168 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 169 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 169 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of | 170 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of |
| 170 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance | 171 | these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance |
| 171 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 172 | about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 5672, 14 lines modified | Offset 5672, 18 lines modified | ||
| 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 5672 | ············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), | 5673 | ···················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1), |
| 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 | 5674 | References:·_\x8h_\x8i_\x8p_\x8a_\x8a··164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310 |
| 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) | 5675 | ···················(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 | 5676 | ············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 5677 | ············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 5678 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5680 | [customizations.services] | ||
| 5681 | masked·=·["debug-shell"] | ||
| 5679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 5682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 5680 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 5683 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 5681 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 5684 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 5682 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 5685 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 5683 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 5686 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 5684 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 5687 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 5685 | ····the·System | 5688 | ····the·System |
| Offset 5762, 18 lines modified | Offset 5766, 14 lines modified | ||
| 5762 | class·disable_debug-shell·{ | 5766 | class·disable_debug-shell·{ |
| 5763 | ··service·{'debug-shell': | 5767 | ··service·{'debug-shell': |
| 5764 | ····enable·=>·false, | 5768 | ····enable·=>·false, |
| 5765 | ····ensure·=>·'stopped', | 5769 | ····ensure·=>·'stopped', |
| 5766 | ··} | 5770 | ··} |
| 5767 | } | 5771 | } |
| 5768 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 5769 | [customizations.services] | ||
| 5770 | masked·=·["debug-shell"] | ||
| 5771 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·R\x8Re\x8eq\x8qu\x8ui\x8ir\x8re\x8e·A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8ti\x8io\x8on\x8n·f\x8fo\x8or\x8r·E\x8Em\x8me\x8er\x8rg\x8ge\x8en\x8nc\x8cy\x8y·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ta\x8ar\x8rg\x8ge\x8et\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 5772 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·R\x8Re\x8eq\x8qu\x8ui\x8ir\x8re\x8e·A\x8Au\x8ut\x8th\x8he\x8en\x8nt\x8ti\x8ic\x8ca\x8at\x8ti\x8io\x8on\x8n·f\x8fo\x8or\x8r·E\x8Em\x8me\x8er\x8rg\x8ge\x8en\x8nc\x8cy\x8y·S\x8Sy\x8ys\x8st\x8te\x8em\x8md\x8d·T\x8Ta\x8ar\x8rg\x8ge\x8et\x8t·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 5772 | Emergency·mode·is·intended·as·a·system·recovery·method,·providing·a·single·user·root·access·to·the | 5773 | Emergency·mode·is·intended·as·a·system·recovery·method,·providing·a·single·user·root·access·to·the |
| 5773 | system·during·a·failed·boot·sequence. | 5774 | system·during·a·failed·boot·sequence. |
| 5774 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set·in·/usr/lib/systemd/ | 5775 | By·default,·Emergency·mode·is·protected·by·requiring·a·password·and·is·set·in·/usr/lib/systemd/ |
| 5775 | system/emergency.service. | 5776 | system/emergency.service. |
| 5776 | ············This·prevents·attackers·with·physical·access·from·trivially·bypassing·security·on·the | 5777 | ············This·prevents·attackers·with·physical·access·from·trivially·bypassing·security·on·the |
| Offset 7056, 14 lines modified | Offset 7056, 18 lines modified | ||
| 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR | 7056 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR |
| 7057 | ···························7.2 | 7057 | ···························7.2 |
| 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 7058 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 | 7059 | ···························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 7060 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 7061 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 7062 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7064 | [customizations.services] | ||
| 7065 | enabled·=·["rsyslog"] | ||
| 7063 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7066 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7064 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7067 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7065 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7068 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7066 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7069 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7067 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7070 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7068 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 7071 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 7069 | ··block: | 7072 | ··block: |
| Offset 7099, 18 lines modified | Offset 7103, 14 lines modified | ||
| 7099 | class·enable_rsyslog·{ | 7103 | class·enable_rsyslog·{ |
| 7100 | ··service·{'rsyslog': | 7104 | ··service·{'rsyslog': |
| 7101 | ····enable·=>·true, | 7105 | ····enable·=>·true, |
| 7102 | ····ensure·=>·'running', | 7106 | ····ensure·=>·'running', |
| 7103 | ··} | 7107 | ··} |
| 7104 | } | 7108 | } |
| 7105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7106 | [customizations.services] | ||
| 7107 | enabled·=·["rsyslog"] | ||
| 7108 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·D\x8De\x8ef\x8fa\x8au\x8ul\x8lt\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 7109 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8ns\x8su\x8ur\x8re\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·D\x8De\x8ef\x8fa\x8au\x8ul\x8lt\x8t·F\x8Fi\x8il\x8le\x8e·P\x8Pe\x8er\x8rm\x8mi\x8is\x8ss\x8si\x8io\x8on\x8ns\x8s·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8ed\x8d·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 7109 | rsyslog·will·create·logfiles·that·do·not·already·exist·on·the·system.·This·settings·controls·what | 7110 | rsyslog·will·create·logfiles·that·do·not·already·exist·on·the·system.·This·settings·controls·what |
| 7110 | permissions·will·be·applied·to·these·newly·created·files. | 7111 | permissions·will·be·applied·to·these·newly·created·files. |
| Max diff block lines reached; 53160/59794 bytes (88.91%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037ec0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037ed0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037ee0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037ef0:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037f00:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037f10:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2020·2861·7320·6f66·2032·3032·3 | 00037f30:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037f40:·2d32·3 | 00037f40:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037f50:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037f60:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037f70:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037f80:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037f90:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037fa0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037fb0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:opensuse:leap:15.0 | 42 | ····*·cpe:/o:opensuse:leap:15.0 |
| 43 | ····*·cpe:/o:opensuse:leap:42.1 | 43 | ····*·cpe:/o:opensuse:leap:42.1 |
| 44 | ····*·cpe:/o:opensuse:leap:42.2 | 44 | ····*·cpe:/o:opensuse:leap:42.2 |
| 45 | ····*·cpe:/o:opensuse:leap:42.3 | 45 | ····*·cpe:/o:opensuse:leap:42.3 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups | 53 | Group ·Guide·to·the·Secure·Configuration·of·openSUSE· Group·contains·4·groups |
| 54 | and·3·rules | 54 | and·3·rules |
| 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 55 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e40:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e50:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e60:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e70:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e80:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e90:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ea0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037eb0:·206f·6620·3230·323 | 00037eb0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ed0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ee0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ef0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f00:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f10:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f20:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 14308, 15 lines modified | Offset 14308, 15 lines modified | ||
| 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e30:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e40:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e50:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e60:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e70:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e80:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e90:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ea0:·206f·6620·3230·323 | 00037ea0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037eb0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ec0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ed0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037ee0:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037ef0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f00:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f10:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 56 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 14310, 15 lines modified | Offset 14310, 15 lines modified | ||
| 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e50:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e60:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037e70:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e80:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e90:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ea0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037eb0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ec0:·206f·6620·3230·323 | 00037ec0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037ee0:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037ef0:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f00:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f10:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f20:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f30:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14309, 15 lines modified | Offset 14309, 15 lines modified | ||
| 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e40:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e50:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e60:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e70:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e80:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e90:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037ea0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037eb0:·3230·323 | 00037eb0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ec0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037ed0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ee0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ef0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037f00:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037f10:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f20:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste |
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 48 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 57 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8M_\x8a_\x8i_\x8l_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00037dd0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00037de0:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00037df0:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00037e00:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00037e10:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00037e20:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00037e50:·2d32·3 | 00037e50:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00037e60:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00037e70:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00037e80:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00037e90:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00037ea0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00037eb0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00037ec0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi-2022 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037dd0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037de0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037df0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037e00:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037e10:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037e20:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037e30:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037e40:·206f·6620·3230·323 | 00037e40:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e60:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e70:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e80:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e90:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037ea0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037eb0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·BSI·APP.4.4.·and·SYS.1.6 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_bsi |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········1.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 | 54 | Group ·Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4 |
| 55 | Group·contains·2·groups·and·3·rules | 55 | Group·contains·2·groups·and·3·rules |
| 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules | 56 | Group ·System·Settings· Group·contains·1·group·and·3·rules |
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037de0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037df0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037e00:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e10:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e20:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e30:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2861·7320·6f66·2032·3032·3 | 00037e50:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e60:·3 | 00037e60:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e70:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e80:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e90:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037ea0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037eb0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037ec0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ed0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System |
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 46 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 54 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 55 | ·········4.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 56 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038130:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038140:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038150:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038160:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038170:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038180:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038190:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000381a0:·7320·6f66·2032·3032·3 | 000381a0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000381b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000381c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000381d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000381e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000381f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038200:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038210:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 19033, 66 lines modified | Offset 19033, 66 lines modified | ||
| 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | 0004a580:·6574·3d22·2369·646d·3733·3933·2220·7461··et="#idm7393"·ta | ||
| 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004a590:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004a5a0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004a5b0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004a5c0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004a5d0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004a5e0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a5f0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0004a5f0:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0004a600:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0004a6 | 0004a600:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a6 | 0004a610:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a6 | 0004a620:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a6 | 0004a630:·3933·223e·3c74·6162·6c65·2063·6c61·7373··93"><table·class | ||
| 0004a6 | 0004a640:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a660 | 0004a650:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a6 | 0004a660:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| 0004a6 | 0004a670:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | ||
| 0004a6 | 0004a680:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | ||
| 0004a690:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0004a6a0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6b0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6 | 0004a6c0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | ||
| 0004a6b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0004a6c0:·7468·3e3c·7464·3e6d·6564·6975·6d3c·2f74··th><td>medium</t | |||
| 0004a6d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0004a6 | 0004a6d0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 0004a6 | 0004a6e0:·7464·3e74·7275·653c·2f74·643e·3c2f·7472··td>true</td></tr | ||
| 0004a | 0004a6f0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0004a7 | 0004a700:·793a·3c2f·7468·3e3c·7464·3e64·6973·6162··y:</th><td>disab | ||
| 0004a7 | 0004a710:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | ||
| 0004a7 | 0004a720:·626c·653e·3c70·7265·3e3c·636f·6465·3e61··ble><pre><code>a | ||
| 0004a7 | 0004a730:·7069·5665·7273·696f·6e3a·206d·6163·6869··piVersion:·machi | ||
| 0004a7 | 0004a740:·6e65·636f·6e66·6967·7572·6174·696f·6e2e··neconfiguration. | ||
| 0004a760 | 0004a750:·6f70·656e·7368·6966·742e·696f·2f76·310a··openshift.io/v1. | ||
| 0004a7 | 0004a760:·6b69·6e64·3a20·4d61·6368·696e·6543·6f6e··kind:·MachineCon | ||
| 0004a7 | 0004a770:·6669·670a·7370·6563·3a0a·2020·636f·6e66··fig.spec:.··conf | ||
| 0004a790 | 0004a780:·6967·3a0a·2020·2020·6967·6e69·7469·6f6e··ig:.····ignition | ||
| 0004a7a0 | 0004a790:·3a0a·2020·2020·2020·7665·7273·696f·6e3a··:.······version: | ||
| 0004a7 | 0004a7a0:·2033·2e31·2e30·0a20·2020·2073·7973·7465···3.1.0.····syste | ||
| 0004a7 | 0004a7b0:·6d64·3a0a·2020·2020·2020·756e·6974·733a··md:.······units: | ||
| 0004a7c0:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | |||
| 0004a7d0:·6562·7567·2d73·6865·6c6c·2e73·6572·7669··ebug-shell.servi | |||
| 0004a7e0:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a7f0:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a800:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a | 0004a810:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | ||
| 0004a | 0004a820:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | ||
| 0004a | 0004a830:·2020·2020·2020·656e·6162·6c65·643a·2066········enabled:·f | ||
| 0004a8 | 0004a840:·616c·7365·0a20·2020·2020·2020·206d·6173··alse.········mas | ||
| 0004a810:·736b·3a20·7472·7565·0a20·2020·2020·202d··sk:·true.······- | |||
| 0004a820:·206e·616d·653a·2064·6562·7567·2d73·6865···name:·debug-she | |||
| 0004a830:·6c6c·2e73·6f63·6b65·740a·2020·2020·2020··ll.socket.······ | |||
| 0004a840:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a850:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a860 | 0004a850:·6b3a·2074·7275·650a·3c2f·636f·6465·3e3c··k:·true.</code>< | ||
| 0004a870 | 0004a860:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | ||
| 0004a8 | 0004a870:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | ||
| 0004a8 | 0004a880:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | ||
| 0004a8 | 0004a890:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | ||
| 0004a8 | 0004a8a0:·612d·7461·7267·6574·3d22·2369·646d·3733··a-target="#idm73 | ||
| 0004a8 | 0004a8b0:·3934·2220·7461·6269·6e64·6578·3d22·3022··94"·tabindex="0" | ||
| 0004a8 | 0004a8c0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0004a8 | 0004a8d0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0004a8 | 0004a8e0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0004a | 0004a8f0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0004a9 | 0004a900:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0004a910:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 0004a920:· | 0004a920:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | ||
| 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | 0004a930:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | ||
| 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | 0004a940:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | 0004a950:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | 0004a960:·3733·3934·223e·3c74·6162·6c65·2063·6c61··7394"><table·cla | ||
| 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | 0004a970:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | ||
| 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | 0004a980:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | ||
| 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | 0004a990:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | ||
| Offset 34734, 66 lines modified | Offset 34734, 66 lines modified | ||
| 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | 00087ad0:·6172·6765·743d·2223·6964·6d31·3831·3338··arget="#idm18138 | ||
| 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00087ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00087af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00087b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00087b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00087b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00087b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00087b40:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00087b50:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00087b60:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00087b70:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00087b80:·6c61·7073·6522·2069·643d·2269·646d·3138··lapse"·id="idm18 | |||
| 00087b90:·3133·3822·3e3c·7461·626c·6520·636c·6173··138"><table·clas | |||
| 00087ba0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00087bb0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00087bc0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00087bd0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00087be0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00087bf0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00087c00:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00087c10:·6f6e·3a3c·2f74·683e·3c74·643e·6d65·6469··on:</th><td>medi | |||
| 00087c20:·756d·3c2f·7464·3e3c·2f74·723e·3c74·723e··um</td></tr><tr> | |||
| 00087c30:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00087c40:·3c74·643e·7472·7565·3c2f·7464·3e3c·2f74··<td>true</td></t | |||
| 00087c50:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00087c60:·6779·3a3c·2f74·683e·3c74·643e·6469·7361··gy:</th><td>disa | |||
| 00087c70:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 00087c80:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00087c90:·6170·6956·6572·7369·6f6e·3a20·6d61·6368··apiVersion:·mach | |||
| 00087ca0:·696e·6563·6f6e·6669·6775·7261·7469·6f6e··ineconfiguration | |||
| 00087cb0:·2e6f·7065·6e73·6869·6674·2e69·6f2f·7631··.openshift.io/v1 | |||
| 00087cc0:·0a6b·696e·643a·204d·6163·6869·6e65·436f··.kind:·MachineCo | |||
| 00087cd0:·6e66·6967·0a73·7065·633a·0a20·2063·6f6e··nfig.spec:.··con | |||
| 00087ce0:·6669·673a·0a20·2020·2069·676e·6974·696f··fig:.····ignitio | |||
| Max diff block lines reached; 16750/33802 bytes (49.55%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8543 bytes (6.40%) of diff not shown. | |||
| Offset 14356, 15 lines modified | Offset 14356, 15 lines modified | ||
| 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038130:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038140:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038150:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038160:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038170:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038180:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00038190:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000381a0:·3032·3 | 000381a0:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000381b0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000381c0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000381d0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000381e0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 000381f0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038200:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038210:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 19032, 67 lines modified | Offset 19032, 67 lines modified | ||
| 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0004a570:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | 0004a580:·646d·3733·3933·2220·7461·6269·6e64·6578··dm7393"·tabindex | ||
| 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0004a590:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0004a5a0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0004a5b0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0004a5c0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0004a5d0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004a5e0:·6d65·6469·6174·696f·6e20· | 0004a5e0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0004a5f0:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a | 0004a5f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0004a6 | 0004a600:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0004a6 | 0004a610:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0004a6 | 0004a620:·2069·643d·2269·646d·3733·3933·223e·3c74···id="idm7393"><t | ||
| 0004a6 | 0004a630:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0004a650 | 0004a640:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0004a6 | 0004a650:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0004a6 | 0004a660:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0004a6 | 0004a670:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0004a6 | 0004a680:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0004a6a0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0004a6b0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0004a6c0:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0004a6d0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004a6e0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0004a6 | 0004a690:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a6a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6b0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0004a6e0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0004a | 0004a6f0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0004a7 | 0004a700:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0004a7 | 0004a710:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0004a7 | 0004a720:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0004a7 | 0004a730:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0004a7 | 0004a740:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0004a7 | 0004a750:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0004a7 | 0004a760:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0004a7 | 0004a770:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0004a7 | 0004a780:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0004a7 | 0004a790:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0004a7 | 0004a7a0:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0004a7 | 0004a7b0:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0004a7c0:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | |||
| 0004a7d0:·6865·6c6c·2e73·6572·7669·6365·0a20·2020··hell.service.··· | |||
| 0004a7e0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0004a7f0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0004a800:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a | 0004a810:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | ||
| 0004a | 0004a820:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | ||
| 0004a7f0:·2065·6e61·626c·6564·3a20·6661·6c73·650a···enabled:·false. | |||
| 0004a800:·2020·2020·2020·2020·6d61·736b·3a20·7472··········mask:·tr | |||
| 0004a810:·7565·0a20·2020·2020·202d·206e·616d·653a··ue.······-·name: | |||
| 0004a820:·2064·6562·7567·2d73·6865·6c6c·2e73·6f63···debug-shell.soc | |||
| 0004a830:·6b65·740a·2020·2020·2020·2020·656e·6162··ket.········enab | |||
| 0004a8 | 0004a830:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | ||
| 0004a8 | 0004a840:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | ||
| 0004a860 | 0004a850:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | ||
| 0004a8 | 0004a860:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | ||
| 0004a8 | 0004a870:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | ||
| 0004a8 | 0004a880:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | ||
| 0004a8 | 0004a890:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | ||
| 0004a8 | 0004a8a0:·6574·3d22·2369·646d·3733·3934·2220·7461··et="#idm7394"·ta | ||
| 0004a8 | 0004a8b0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004a8 | 0004a8c0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004a8 | 0004a8d0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004a8 | 0004a8e0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004a | 0004a8f0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004a9 | 0004a900:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004a910:·4b75·6265·726e·6574·6573·2073·6e69·7070··Kubernetes·snipp | |||
| 0004a920:· | 0004a920:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | 0004a930:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | 0004a940:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | 0004a950:·6522·2069·643d·2269·646d·3733·3934·223e··e"·id="idm7394"> | ||
| 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | 0004a960:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | ||
| 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | 0004a970:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | ||
| 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | 0004a980:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | 0004a990:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | ||
| Offset 34733, 67 lines modified | Offset 34733, 67 lines modified | ||
| 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00087ac0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | 00087ad0:·2223·6964·6d31·3831·3338·2220·7461·6269··"#idm18138"·tabi | ||
| 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 00087ae0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 00087af0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 00087b00:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 00087b10:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 00087b20:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 00087b30:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | |||
| 00087b40:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 00087b50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00087b60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00087b70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00087b80:·2069·643d·2269·646d·3138·3133·3822·3e3c···id="idm18138">< | |||
| 00087b90:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00087ba0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00087bb0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00087bc0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00087bd0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00087be0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00087bf0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00087c00:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00087c10:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | |||
| 00087c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00087c30:·626f·6f74·3a3c·2f74·683e·3c74·643e·7472··boot:</th><td>tr | |||
| 00087c40:·7565·3c2f·7464·3e3c·2f74·723e·3c74·723e··ue</td></tr><tr> | |||
| 00087c50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00087c60:·683e·3c74·643e·6469·7361·626c·653c·2f74··h><td>disable</t | |||
| 00087c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00087c80:·7072·653e·3c63·6f64·653e·6170·6956·6572··pre><code>apiVer | |||
| 00087c90:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 00087ca0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 00087cb0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| Max diff block lines reached; 16612/33940 bytes (48.95%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·High-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_high |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 3585, 15 lines modified | Offset 3585, 15 lines modified | ||
| 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 3585 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 3586 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 3587 | Severity: ···high | 3587 | Severity: ···high |
| 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 3588 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 3589 | Identifiers:·CCE-86189-8 | 3589 | Identifiers:·CCE-86189-8 |
| 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 3590 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 3591 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 3592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 3594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 3595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3597 | apiVersion:·machineconfiguration.openshift.io/v1 | 3597 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 3598 | kind:·MachineConfig | 3598 | kind:·MachineConfig |
| 3599 | spec: | 3599 | spec: |
| Max diff block lines reached; 547/8537 bytes (6.41%) of diff not shown. | |||
| Offset 14357, 16 lines modified | Offset 14357, 16 lines modified | ||
| 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038140:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038150:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038160:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038170:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038180:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038190:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000381a0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000381b0:·2020·2861·7320·6f66·2032·3032·3 | 000381b0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 000381c0:·2d32·3 | 000381c0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000381d0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 000381e0:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000381f0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038200:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038210:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038220:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038230:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 19034, 66 lines modified | Offset 19034, 66 lines modified | ||
| 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | 0004a590:·7461·7267·6574·3d22·2369·646d·3733·3933··target="#idm7393 | ||
| 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0004a5a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0004a5b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0004a5c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0004a5d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0004a5e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0004a5f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a600:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0004a600:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a610:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0004a6 | 0004a610:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004a630 | 0004a620:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004a6 | 0004a630:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004a6 | 0004a640:·646d·3733·3933·223e·3c74·6162·6c65·2063··dm7393"><table·c | ||
| 0004a6 | 0004a650:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004a6 | 0004a660:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004a6 | 0004a670:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004a6 | 0004a680:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004a6 | 0004a690:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004a6a0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0004a6b0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0004a6c0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6d··ption:</th><td>m | |||
| 0004a6 | 0004a6d0:·6564·6975·6d3c·2f74·643e·3c2f·7472·3e3c··edium</td></tr>< | ||
| 0004a6c0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0004a6d0:·6e3a·3c2f·7468·3e3c·7464·3e6d·6564·6975··n:</th><td>mediu | |||
| 0004a6e0:·6d3c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··m</td></tr><tr>< | |||
| 0004a6 | 0004a6e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0004a | 0004a6f0:·7468·3e3c·7464·3e74·7275·653c·2f74·643e··th><td>true</td> | ||
| 0004a7 | 0004a700:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0004a7 | 0004a710:·6174·6567·793a·3c2f·7468·3e3c·7464·3e64··ategy:</th><td>d | ||
| 0004a7 | 0004a720:·6973·6162·6c65·3c2f·7464·3e3c·2f74·723e··isable</td></tr> | ||
| 0004a7 | 0004a730:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | ||
| 0004a7 | 0004a740:·6465·3e61·7069·5665·7273·696f·6e3a·206d··de>apiVersion:·m | ||
| 0004a7 | 0004a750:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | ||
| 0004a7 | 0004a760:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | ||
| 0004a7 | 0004a770:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | ||
| 0004a7 | 0004a780:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | ||
| 0004a7 | 0004a790:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | ||
| 0004a7 | 0004a7a0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | ||
| 0004a7 | 0004a7b0:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | ||
| 0004a7 | 0004a7c0:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | ||
| 0004a7d0:·6974·733a·0a20·2020·2020·202d·206e·616d··its:.······-·nam | |||
| 0004a7e0:·653a·2064·6562·7567·2d73·6865·6c6c·2e73··e:·debug-shell.s | |||
| 0004a7f0:·6572·7669·6365·0a20·2020·2020·2020·2065··ervice.········e | |||
| 0004a800:·6e61·626c·6564·3a20·6661·6c73·650a·2020··nabled:·false.·· | |||
| 0004a810:·2020·2020·2020·6d61·736b·3a20·7472·7565········mask:·true | |||
| 0004a | 0004a820:·0a20·2020·2020·202d·206e·616d·653a·2064··.······-·name:·d | ||
| 0004a | 0004a830:·6562·7567·2d73·6865·6c6c·2e73·6f63·6b65··ebug-shell.socke | ||
| 0004a800:·6365·0a20·2020·2020·2020·2065·6e61·626c··ce.········enabl | |||
| 0004a810:·6564·3a20·6661·6c73·650a·2020·2020·2020··ed:·false.······ | |||
| 0004a820:·2020·6d61·736b·3a20·7472·7565·0a20·2020····mask:·true.··· | |||
| 0004a830:·2020·202d·206e·616d·653a·2064·6562·7567·····-·name:·debug | |||
| 0004a840:·2d73·6865·6c6c·2e73·6f63·6b65·740a·2020··-shell.socket.·· | |||
| 0004a8 | 0004a840:·740a·2020·2020·2020·2020·656e·6162·6c65··t.········enable | ||
| 0004a860 | 0004a850:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | ||
| 0004a8 | 0004a860:·206d·6173·6b3a·2074·7275·650a·3c2f·636f···mask:·true.</co | ||
| 0004a8 | 0004a870:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | ||
| 0004a8 | 0004a880:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | ||
| 0004a8 | 0004a890:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | ||
| 0004a8 | 0004a8a0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | ||
| 0004a8 | 0004a8b0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0004a8 | 0004a8c0:·646d·3733·3934·2220·7461·6269·6e64·6578··dm7394"·tabindex | ||
| 0004a8 | 0004a8d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0004a8 | 0004a8e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0004a | 0004a8f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0004a9 | 0004a900:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0004a9 | 0004a910:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0004a9 | 0004a920:·6d65·6469·6174·696f·6e20·4b75·6265·726e··mediation·Kubern | ||
| 0004a930:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | 0004a940:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | ||
| 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | 0004a950:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | ||
| 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | 0004a960:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | ||
| 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | 0004a970:·2269·646d·3733·3934·223e·3c74·6162·6c65··"idm7394"><table | ||
| 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | 0004a980:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | ||
| 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | 0004a990:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | ||
| 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | 0004a9a0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00087ae0:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | 00087af0:·3831·3338·2220·7461·6269·6e64·6578·3d22··8138"·tabindex=" | ||
| 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00087b00:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00087b10:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00087b20:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00087b30:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00087b40:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00087b50:·6469·6174·696f·6e20·4b75·6265·726e·6574··diation·Kubernet | |||
| 00087b60:·6573·2073·6e69·7070·6574·20e2·87b2·3c2f··es·snippet·...</ | |||
| 00087b70:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 00087b80:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 00087b90:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 00087ba0:·646d·3138·3133·3822·3e3c·7461·626c·6520··dm18138"><table· | |||
| 00087bb0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00087bc0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00087bd0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00087be0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00087bf0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00087c00:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00087c10:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00087c20:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00087c30:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | |||
| 00087c40:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00087c50:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | |||
| 00087c60:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00087c70:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00087c80:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00087c90:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00087ca0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | |||
| 00087cb0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | |||
| 00087cc0:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | |||
| 00087cd0:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | |||
| 00087ce0:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | |||
| Max diff block lines reached; 8582/25772 bytes (33.30%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate-rev-4 |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14357, 15 lines modified | Offset 14357, 15 lines modified | ||
| 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00038140:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00038150:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00038160:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00038170:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00038180:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00038190:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 000381a0:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 000381b0:·6f66·2032·3032·3 | 000381b0:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 000381c0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 000381d0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 000381e0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 000381f0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00038200:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00038210:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00038220:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 19033, 67 lines modified | Offset 19033, 67 lines modified | ||
| 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0004a580:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | 0004a590:·3d22·2369·646d·3733·3933·2220·7461·6269··="#idm7393"·tabi | ||
| 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0004a5a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0004a5b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0004a5c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0004a5d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0004a5e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20· | 0004a5f0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | ||
| 0004a600:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0004a6 | 0004a600:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | ||
| 0004a6 | 0004a610:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0004a6 | 0004a620:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0004a6 | 0004a630:·7073·6522·2069·643d·2269·646d·3733·3933··pse"·id="idm7393 | ||
| 0004a6 | 0004a640:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | ||
| 0004a6 | 0004a650:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | ||
| 0004a670 | 0004a660:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | ||
| 0004a6 | 0004a670:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | ||
| 0004a6 | 0004a680:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | ||
| 0004a6 | 0004a690:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | ||
| 0004a6a0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0004a6b0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0004a6c0:·3c2f·7468·3e3c·7464·3e6d·6564·6975·6d3c··</th><td>medium< | |||
| 0004a6 | 0004a6d0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0004a6c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0004a6d0:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0004a6e0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0004a6 | 0004a6e0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0004a | 0004a6f0:·3e74·7275·653c·2f74·643e·3c2f·7472·3e3c··>true</td></tr>< | ||
| 0004a7 | 0004a700:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | ||
| 0004a7 | 0004a710:·3c2f·7468·3e3c·7464·3e64·6973·6162·6c65··</th><td>disable | ||
| 0004a7 | 0004a720:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 0004a7 | 0004a730:·653e·3c70·7265·3e3c·636f·6465·3e61·7069··e><pre><code>api | ||
| 0004a7 | 0004a740:·5665·7273·696f·6e3a·206d·6163·6869·6e65··Version:·machine | ||
| 0004a7 | 0004a750:·636f·6e66·6967·7572·6174·696f·6e2e·6f70··configuration.op | ||
| 0004a7 | 0004a760:·656e·7368·6966·742e·696f·2f76·310a·6b69··enshift.io/v1.ki | ||
| 0004a7 | 0004a770:·6e64·3a20·4d61·6368·696e·6543·6f6e·6669··nd:·MachineConfi | ||
| 0004a7 | 0004a780:·670a·7370·6563·3a0a·2020·636f·6e66·6967··g.spec:.··config | ||
| 0004a7a0 | 0004a790:·3a0a·2020·2020·6967·6e69·7469·6f6e·3a0a··:.····ignition:. | ||
| 0004a7 | 0004a7a0:·2020·2020·2020·7665·7273·696f·6e3a·2033········version:·3 | ||
| 0004a7 | 0004a7b0:·2e31·2e30·0a20·2020·2073·7973·7465·6d64··.1.0.····systemd | ||
| 0004a7 | 0004a7c0:·3a0a·2020·2020·2020·756e·6974·733a·0a20··:.······units:.· | ||
| 0004a7d0:·2020·2020·202d·206e·616d·653a·2064·6562·······-·name:·deb | |||
| 0004a7e0:·7567·2d73·6865·6c6c·2e73·6572·7669·6365··ug-shell.service | |||
| 0004a7f0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a800:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | |||
| 0004a810:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0004a | 0004a820:·202d·206e·616d·653a·2064·6562·7567·2d73···-·name:·debug-s | ||
| 0004a | 0004a830:·6865·6c6c·2e73·6f63·6b65·740a·2020·2020··hell.socket.···· | ||
| 0004a8 | 0004a840:·2020·2020·656e·6162·6c65·643a·2066·616c······enabled:·fal | ||
| 0004a8 | 0004a850:·7365·0a20·2020·2020·2020·206d·6173·6b3a··se.········mask: | ||
| 0004a820:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0004a830:·616d·653a·2064·6562·7567·2d73·6865·6c6c··ame:·debug-shell | |||
| 0004a840:·2e73·6f63·6b65·740a·2020·2020·2020·2020··.socket.········ | |||
| 0004a850:·656e·6162·6c65·643a·2066·616c·7365·0a20··enabled:·false.· | |||
| 0004a860:·2020·2020·2020·206d·6173·6b3a·2074·7275·········mask:·tru | |||
| 0004a8 | 0004a860:·2074·7275·650a·3c2f·636f·6465·3e3c·2f70···true.</code></p | ||
| 0004a8 | 0004a870:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | ||
| 0004a8 | 0004a880:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | ||
| 0004a8 | 0004a890:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | ||
| 0004a8 | 0004a8a0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | ||
| 0004a8 | 0004a8b0:·7461·7267·6574·3d22·2369·646d·3733·3934··target="#idm7394 | ||
| 0004a8 | 0004a8c0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0004a8 | 0004a8d0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0004a8 | 0004a8e0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0004a | 0004a8f0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0004a9 | 0004a900:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0004a9 | 0004a910:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0004a920:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0004a930:· | 0004a930:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | ||
| 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | 0004a940:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | ||
| 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | 0004a950:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | ||
| 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | 0004a960:·6c61·7073·6522·2069·643d·2269·646d·3733··lapse"·id="idm73 | ||
| 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | 0004a970:·3934·223e·3c74·6162·6c65·2063·6c61·7373··94"><table·class | ||
| 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0004a980:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0004a990:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0004a9a0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | ||
| Offset 34735, 66 lines modified | Offset 34735, 66 lines modified | ||
| 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | 00087ae0:·6765·743d·2223·6964·6d31·3831·3338·2220··get="#idm18138"· | ||
| 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 00087af0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 00087b00:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 00087b10:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 00087b20:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 00087b30:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 00087b40:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 00087b50:·6e20·4b75·6265·726e·6574·6573·2073·6e69··n·Kubernetes·sni | |||
| 00087b60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00087b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00087b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00087b90:·7073·6522·2069·643d·2269·646d·3138·3133··pse"·id="idm1813 | |||
| 00087ba0:·3822·3e3c·7461·626c·6520·636c·6173·733d··8"><table·class= | |||
| 00087bb0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00087bc0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00087bd0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00087be0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00087bf0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00087c00:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00087c10:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00087c20:·3a3c·2f74·683e·3c74·643e·6d65·6469·756d··:</th><td>medium | |||
| 00087c30:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00087c40:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00087c50:·643e·7472·7565·3c2f·7464·3e3c·2f74·723e··d>true</td></tr> | |||
| 00087c60:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00087c70:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00087c80:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00087c90:·6c65·3e3c·7072·653e·3c63·6f64·653e·6170··le><pre><code>ap | |||
| 00087ca0:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 00087cb0:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 00087cc0:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 00087cd0:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 00087ce0:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 00087cf0:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| Max diff block lines reached; 8444/25634 bytes (32.94%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux | 56 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·NIST·800-53·Moderate-Impact·Baseline·for·Red·Hat·Enterprise·Linux |
| 57 | ··············CoreOS | 57 | ··············CoreOS |
| 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate | 58 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_moderate |
| 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 59 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 60 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 429, 15 lines modified | Offset 429, 15 lines modified | ||
| 429 | Identifiers:·CCE-82496-1 | 429 | Identifiers:·CCE-82496-1 |
| 430 | ·············_\x8c_\x8u_\x8i····3.4.5 | 430 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 431 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 432 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 433 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 434 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 435 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 441 | apiVersion:·machineconfiguration.openshift.io/v1 | 441 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 442 | kind:·MachineConfig | 442 | kind:·MachineConfig |
| 443 | spec: | 443 | spec: |
| Offset 448, 15 lines modified | Offset 448, 15 lines modified | ||
| 448 | ······units: | 448 | ······units: |
| 449 | ······-·name:·debug-shell.service | 449 | ······-·name:·debug-shell.service |
| 450 | ········enabled:·false | 450 | ········enabled:·false |
| 451 | ········mask:·true | 451 | ········mask:·true |
| 452 | ······-·name:·debug-shell.socket | 452 | ······-·name:·debug-shell.socket |
| 453 | ········enabled:·false | 453 | ········enabled:·false |
| 454 | ········mask:·true | 454 | ········mask:·true |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 460 | apiVersion:·machineconfiguration.openshift.io/v1 | 460 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 461 | kind:·MachineConfig | 461 | kind:·MachineConfig |
| 462 | spec: | 462 | spec: |
| Offset 1879, 15 lines modified | Offset 1879, 15 lines modified | ||
| 1879 | ············_\x8c_\x8u_\x8i············3.1.16 | 1879 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1880 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1881 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1882 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1883 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1884 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1885 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1886 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1887 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1888 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1889 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1890 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1891 | apiVersion:·machineconfiguration.openshift.io/v1 | 1891 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1892 | kind:·MachineConfig | 1892 | kind:·MachineConfig |
| 1893 | spec: | 1893 | spec: |
| Offset 1898, 15 lines modified | Offset 1898, 15 lines modified | ||
| 1898 | ······units: | 1898 | ······units: |
| 1899 | ······-·name:·bluetooth.service | 1899 | ······-·name:·bluetooth.service |
| 1900 | ········enabled:·false | 1900 | ········enabled:·false |
| 1901 | ········mask:·true | 1901 | ········mask:·true |
| 1902 | ······-·name:·bluetooth.socket | 1902 | ······-·name:·bluetooth.socket |
| 1903 | ········enabled:·false | 1903 | ········enabled:·false |
| 1904 | ········mask:·true | 1904 | ········mask:·true |
| 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1905 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1906 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1907 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1908 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1909 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1910 | apiVersion:·machineconfiguration.openshift.io/v1 | 1910 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1911 | kind:·MachineConfig | 1911 | kind:·MachineConfig |
| 1912 | spec: | 1912 | spec: |
| Offset 2215, 15 lines modified | Offset 2215, 15 lines modified | ||
| 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2215 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2216 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2217 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2218 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2219 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2220 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2221 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2222 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2223 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2224 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2225 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2226 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2227 | apiVersion:·machineconfiguration.openshift.io/v1 | 2227 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2228 | kind:·MachineConfig | 2228 | kind:·MachineConfig |
| 2229 | spec: | 2229 | spec: |
| Offset 2234, 15 lines modified | Offset 2234, 15 lines modified | ||
| 2234 | ······units: | 2234 | ······units: |
| 2235 | ······-·name:·autofs.service | 2235 | ······-·name:·autofs.service |
| 2236 | ········enabled:·false | 2236 | ········enabled:·false |
| 2237 | ········mask:·true | 2237 | ········mask:·true |
| 2238 | ······-·name:·autofs.socket | 2238 | ······-·name:·autofs.socket |
| 2239 | ········enabled:·false | 2239 | ········enabled:·false |
| 2240 | ········mask:·true | 2240 | ········mask:·true |
| 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2241 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2242 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2243 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2244 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2245 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2246 | apiVersion:·machineconfiguration.openshift.io/v1 | 2246 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2247 | kind:·MachineConfig | 2247 | kind:·MachineConfig |
| 2248 | spec: | 2248 | spec: |
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037ea0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037eb0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ec0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037ed0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ee0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ef0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037f10:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f20:·2d30·3 | 00037f20:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 18992, 66 lines modified | Offset 18992, 66 lines modified | ||
| 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0004a2f0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | 0004a300:·3339·3322·2074·6162·696e·6465·783d·2230··393"·tabindex="0 | ||
| 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0004a310:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0004a320:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0004a330:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0004a340:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0004a350:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0004a360:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0004a360:·6961·7469·6f6e·204b·7562·6572·6e65·7465··iation·Kubernete | |||
| 0004a370:·7320·736e·6970·7065·7420·e287·b23c·2f61··s·snippet·...</a | |||
| 0004a3 | 0004a370:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0004a3 | 0004a380:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0004a3 | 0004a390:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0004a3 | 0004a3a0:·3d22·6964·6d37·3339·3322·3e3c·7461·626c··="idm7393"><tabl | ||
| 0004a3 | 0004a3b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | ||
| 0004a3 | 0004a3c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | ||
| 0004a3 | 0004a3d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | ||
| 0004a3 | 0004a3e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | ||
| 0004a | 0004a3f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | ||
| 0004a4 | 0004a400:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004a420:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0004a430:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6d65··tion:</th><td>me | |||
| 0004a440:·6469·756d·3c2f·7464·3e3c·2f74·723e·3c74··dium</td></tr><t | |||
| 0004a450:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0004a460:·683e·3c74·643e·7472·7565·3c2f·7464·3e3c··h><td>true</td>< | |||
| 0004a4 | 0004a410:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0004a420:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0004a430:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 0004a440:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0004a450:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0004a460:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004a4 | 0004a470:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0004a4 | 0004a480:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | ||
| 0004a4 | 0004a490:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0004a4 | 0004a4a0:·3c63·6f64·653e·6170·6956·6572·7369·6f6e··<code>apiVersion | ||
| 0004a4 | 0004a4b0:·3a20·6d61·6368·696e·6563·6f6e·6669·6775··:·machineconfigu | ||
| 0004a4 | 0004a4c0:·7261·7469·6f6e·2e6f·7065·6e73·6869·6674··ration.openshift | ||
| 0004a4 | 0004a4d0:·2e69·6f2f·7631·0a6b·696e·643a·204d·6163··.io/v1.kind:·Mac | ||
| 0004a4 | 0004a4e0:·6869·6e65·436f·6e66·6967·0a73·7065·633a··hineConfig.spec: | ||
| 0004a | 0004a4f0:·0a20·2063·6f6e·6669·673a·0a20·2020·2069··.··config:.····i | ||
| 0004a5 | 0004a500:·676e·6974·696f·6e3a·0a20·2020·2020·2076··gnition:.······v | ||
| 0004a5 | 0004a510:·6572·7369·6f6e·3a20·332e·312e·300a·2020··ersion:·3.1.0.·· | ||
| 0004a5 | 0004a520:·2020·7379·7374·656d·643a·0a20·2020·2020····systemd:.····· | ||
| 0004a530:·2075·6e69·7473·3a0a·2020·2020·2020·2d20···units:.······-· | |||
| 0004a540:·6e61·6d65·3a20·6465·6275·672d·7368·656c··name:·debug-shel | |||
| 0004a550:·6c2e·7365·7276·6963·650a·2020·2020·2020··l.service.······ | |||
| 0004a560:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0004a570:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0004a5 | 0004a580:·7275·650a·2020·2020·2020·2d20·6e61·6d65··rue.······-·name | ||
| 0004a5 | 0004a590:·3a20·6465·6275·672d·7368·656c·6c2e·736f··:·debug-shell.so | ||
| 0004a5 | 0004a5a0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | ||
| 0004a570:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | |||
| 0004a580:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | |||
| 0004a590:·2020·2020·2020·2d20·6e61·6d65·3a20·6465········-·name:·de | |||
| 0004a5a0:·6275·672d·7368·656c·6c2e·736f·636b·6574··bug-shell.socket | |||
| 0004a5b0:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | |||
| 0004a5 | 0004a5b0:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | ||
| 0004a5 | 0004a5c0:·2020·2020·6d61·736b·3a20·7472·7565·0a3c······mask:·true.< | ||
| 0004a5 | 0004a5d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0004a5 | 0004a5e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0004a | 0004a5f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0004a6 | 0004a600:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0004a6 | 0004a610:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0004a6 | 0004a620:·2223·6964·6d37·3339·3422·2074·6162·696e··"#idm7394"·tabin | ||
| 0004a6 | 0004a630:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0004a6 | 0004a640:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0004a6 | 0004a650:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0004a6 | 0004a660:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0004a6 | 0004a670:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0004a6 | 0004a680:·3e52·656d·6564·6961·7469·6f6e·204b·7562··>Remediation·Kub | ||
| 0004a690:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | 0004a6a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | 0004a6b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | 0004a6c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | 0004a6d0:·6964·3d22·6964·6d37·3339·3422·3e3c·7461··id="idm7394"><ta | ||
| 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | 0004a6e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | ||
| 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | 0004a6f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | ||
| 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | 0004a700:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | ||
| Offset 34693, 66 lines modified | Offset 34693, 66 lines modified | ||
| 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00087840:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | 00087850:·646d·3138·3133·3822·2074·6162·696e·6465··dm18138"·tabinde | ||
| 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 00087860:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 00087870:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 00087880:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 00087890:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 000878a0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 000878b0:·656d·6564·6961·7469·6f6e·204b·7562·6572··emediation·Kuber | |||
| 000878c0:·6e65·7465·7320·736e·6970·7065·7420·e287··netes·snippet·.. | |||
| 000878d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000878e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000878f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00087900:·3d22·6964·6d31·3831·3338·223e·3c74·6162··="idm18138"><tab | |||
| 00087910:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00087920:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00087930:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00087940:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00087950:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00087960:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00087970:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00087980:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00087990:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 000879a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000879b0:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 000879c0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000879d0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 000879e0:·7464·3e64·6973·6162·6c65·3c2f·7464·3e3c··td>disable</td>< | |||
| 000879f0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 00087a00:·3e3c·636f·6465·3e61·7069·5665·7273·696f··><code>apiVersio | |||
| 00087a10:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 00087a20:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| Max diff block lines reached; 8582/25772 bytes (33.30%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Infrastructure·Protection·(CIP)·cybersecurity·standards·profile |
| 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS | 46 | ··············for·Red·Hat·Enterprise·Linux·CoreOS |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_nerc-cip |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 49 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 418, 15 lines modified | Offset 418, 15 lines modified | ||
| 418 | Identifiers:·CCE-82496-1 | 418 | Identifiers:·CCE-82496-1 |
| 419 | ·············_\x8c_\x8u_\x8i····3.4.5 | 419 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 420 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 421 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 422 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 423 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 424 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 430 | apiVersion:·machineconfiguration.openshift.io/v1 | 430 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 431 | kind:·MachineConfig | 431 | kind:·MachineConfig |
| 432 | spec: | 432 | spec: |
| Offset 437, 15 lines modified | Offset 437, 15 lines modified | ||
| 437 | ······units: | 437 | ······units: |
| 438 | ······-·name:·debug-shell.service | 438 | ······-·name:·debug-shell.service |
| 439 | ········enabled:·false | 439 | ········enabled:·false |
| 440 | ········mask:·true | 440 | ········mask:·true |
| 441 | ······-·name:·debug-shell.socket | 441 | ······-·name:·debug-shell.socket |
| 442 | ········enabled:·false | 442 | ········enabled:·false |
| 443 | ········mask:·true | 443 | ········mask:·true |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 449 | apiVersion:·machineconfiguration.openshift.io/v1 | 449 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 450 | kind:·MachineConfig | 450 | kind:·MachineConfig |
| 451 | spec: | 451 | spec: |
| Offset 1868, 15 lines modified | Offset 1868, 15 lines modified | ||
| 1868 | ············_\x8c_\x8u_\x8i············3.1.16 | 1868 | ············_\x8c_\x8u_\x8i············3.1.16 |
| 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 | 1869 | ············_\x8d_\x8i_\x8s_\x8a···········CCI-000085,·CCI-001551 |
| 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 | 1870 | References:·_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.5.1,·4.3.3.5.2,·4.3.3.5.3,·4.3.3.5.4,·4.3.3.5.5,·4.3.3.5.6,·4.3.3.5.7,·4.3.3.5.8,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.1,·4.3.3.7.2,·4.3.3.7.3,·4.3.3.7.4,·4.3.4.3.2,·4.3.4.3.3 |
| 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 | 1871 | ············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.11,·SR·1.12,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.6,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.2,·SR·2.3,·SR·2.4,·SR·2.5,·SR·2.6,·SR·2.7,·SR·3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR·5.3,·SR·7.1,·SR·7.6 |
| 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 | 1872 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1,·A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 1873 | ············_\x8n_\x8i_\x8s_\x8t···········AC-18(a),·AC-18(3),·CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1874 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1875 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1876 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1877 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1878 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1879 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1880 | apiVersion:·machineconfiguration.openshift.io/v1 | 1880 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1881 | kind:·MachineConfig | 1881 | kind:·MachineConfig |
| 1882 | spec: | 1882 | spec: |
| Offset 1887, 15 lines modified | Offset 1887, 15 lines modified | ||
| 1887 | ······units: | 1887 | ······units: |
| 1888 | ······-·name:·bluetooth.service | 1888 | ······-·name:·bluetooth.service |
| 1889 | ········enabled:·false | 1889 | ········enabled:·false |
| 1890 | ········mask:·true | 1890 | ········mask:·true |
| 1891 | ······-·name:·bluetooth.socket | 1891 | ······-·name:·bluetooth.socket |
| 1892 | ········enabled:·false | 1892 | ········enabled:·false |
| 1893 | ········mask:·true | 1893 | ········mask:·true |
| 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 1894 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1895 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1896 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1897 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1898 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1899 | apiVersion:·machineconfiguration.openshift.io/v1 | 1899 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 1900 | kind:·MachineConfig | 1900 | kind:·MachineConfig |
| 1901 | spec: | 1901 | spec: |
| Offset 2204, 15 lines modified | Offset 2204, 15 lines modified | ||
| 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) | 2204 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a··········164.308(a)(3)(i),·164.308(a)(3)(ii)(A),·164.310(d)(1),·164.310(d)(2),·164.312(a)(1),·164.312(a)(2)(iv),·164.312(b) |
| 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 | 2205 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x80_\x89·4.3.3.2.2,·4.3.3.5.1,·4.3.3.5.2,·4.3.3.6.1,·4.3.3.6.2,·4.3.3.6.3,·4.3.3.6.4,·4.3.3.6.5,·4.3.3.6.6,·4.3.3.6.7,·4.3.3.6.8,·4.3.3.6.9,·4.3.3.7.2,·4.3.3.7.4 |
| 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 | 2206 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·1.1,·SR·1.10,·SR·1.13,·SR·1.2,·SR·1.3,·SR·1.4,·SR·1.5,·SR·1.7,·SR·1.8,·SR·1.9,·SR·2.1,·SR·2.6 |
| 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 2207 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2,·A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 2208 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 2209 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 2210 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2213 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2214 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2215 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2216 | apiVersion:·machineconfiguration.openshift.io/v1 | 2216 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2217 | kind:·MachineConfig | 2217 | kind:·MachineConfig |
| 2218 | spec: | 2218 | spec: |
| Offset 2223, 15 lines modified | Offset 2223, 15 lines modified | ||
| 2223 | ······units: | 2223 | ······units: |
| 2224 | ······-·name:·autofs.service | 2224 | ······-·name:·autofs.service |
| 2225 | ········enabled:·false | 2225 | ········enabled:·false |
| 2226 | ········mask:·true | 2226 | ········mask:·true |
| 2227 | ······-·name:·autofs.socket | 2227 | ······-·name:·autofs.socket |
| 2228 | ········enabled:·false | 2228 | ········enabled:·false |
| 2229 | ········mask:·true | 2229 | ········mask:·true |
| 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 2230 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2231 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 2232 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 2233 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 2234 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 2235 | apiVersion:·machineconfiguration.openshift.io/v1 | 2235 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 2236 | kind:·MachineConfig | 2236 | kind:·MachineConfig |
| 2237 | spec: | 2237 | spec: |
| Offset 14287, 16 lines modified | Offset 14287, 16 lines modified | ||
| 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ce0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037cf0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037d00:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037d10:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037d20:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037d30:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037d50:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037d50:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037d60:·303 | 00037d60:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037d70:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037d80:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037d90:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037da0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037db0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037dc0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037dd0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 23044, 66 lines modified | Offset 23044, 66 lines modified | ||
| 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0005a030:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | 0005a040:·3237·3032·3322·2074·6162·696e·6465·783d··27023"·tabindex= | ||
| 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0005a050:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0005a060:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0005a070:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0005a080:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0005a090:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0005a0a0:·6564·6961·7469·6f6e·20 | 0005a0a0:·6564·6961·7469·6f6e·2073·6372·6970·7420··ediation·script· | ||
| 0005a0b0:·7465·7320·736e·6970·7065·7420·e287·b23c··tes·snippet·...< | |||
| 0005a0 | 0005a0b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0005a0 | 0005a0c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0005a0 | 0005a0d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0005a0 | 0005a0e0:·6964·3d22·6964·6d32·3730·3233·223e·3c74··id="idm27023"><t | ||
| 0005a | 0005a0f0:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | ||
| 0005a1 | 0005a100:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | ||
| 0005a1 | 0005a110:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | ||
| 0005a1 | 0005a120:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | ||
| 0005a1 | 0005a130:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | ||
| 0005a1 | 0005a140:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0005a160:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0005a170:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0005a180:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0005a190:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0005a1a0:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0005a1 | 0005a150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0005a160:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0005a170:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | |||
| 0005a180:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0005a190:·6f6f·743a·3c2f·7468·3e3c·7464·3e74·7275··oot:</th><td>tru | |||
| 0005a1a0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0005a1 | 0005a1b0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0005a1 | 0005a1c0:·3e3c·7464·3e64·6973·6162·6c65·3c2f·7464··><td>disable</td | ||
| 0005a1 | 0005a1d0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | ||
| 0005a1 | 0005a1e0:·7265·3e3c·636f·6465·3e61·7069·5665·7273··re><code>apiVers | ||
| 0005a | 0005a1f0:·696f·6e3a·206d·6163·6869·6e65·636f·6e66··ion:·machineconf | ||
| 0005a2 | 0005a200:·6967·7572·6174·696f·6e2e·6f70·656e·7368··iguration.opensh | ||
| 0005a2 | 0005a210:·6966·742e·696f·2f76·310a·6b69·6e64·3a20··ift.io/v1.kind:· | ||
| 0005a2 | 0005a220:·4d61·6368·696e·6543·6f6e·6669·670a·7370··MachineConfig.sp | ||
| 0005a2 | 0005a230:·6563·3a0a·2020·636f·6e66·6967·3a0a·2020··ec:.··config:.·· | ||
| 0005a2 | 0005a240:·2020·6967·6e69·7469·6f6e·3a0a·2020·2020····ignition:.···· | ||
| 0005a2 | 0005a250:·2020·7665·7273·696f·6e3a·2033·2e31·2e30····version:·3.1.0 | ||
| 0005a2 | 0005a260:·0a20·2020·2073·7973·7465·6d64·3a0a·2020··.····systemd:.·· | ||
| 0005a2 | 0005a270:·2020·2020·756e·6974·733a·0a20·2020·2020······units:.····· | ||
| 0005a2 | 0005a280:·202d·206e·616d·653a·2073·7368·642e·7365···-·name:·sshd.se | ||
| 0005a2a0:·650a·2020·2020·2020·2020·656e·6162·6c65··e.········enable | |||
| 0005a2b0:·643a·2066·616c·7365·0a20·2020·2020·2020··d:·false.······· | |||
| 0005a2c0:·206d·6173·6b3a·2074·7275·650a·2020·2020···mask:·true.···· | |||
| 0005a2d0:·2020·2d20·6e61·6d65·3a20·7373·6864·2e73····-·name:·sshd.s | |||
| 0005a2 | 0005a290:·7276·6963·650a·2020·2020·2020·2020·656e··rvice.········en | ||
| 0005a2 | 0005a2a0:·6162·6c65·643a·2066·616c·7365·0a20·2020··abled:·false.··· | ||
| 0005a | 0005a2b0:·2020·2020·206d·6173·6b3a·2074·7275·650a·······mask:·true. | ||
| 0005a2c0:·2020·2020·2020·2d20·6e61·6d65·3a20·7373········-·name:·ss | |||
| 0005a2d0:·6864·2e73·6f63·6b65·740a·2020·2020·2020··hd.socket.······ | |||
| 0005a2e0:·2020·656e·6162·6c65·643a·2066·616c·7365····enabled:·false | |||
| 0005a2f0:·0a20·2020·2020·2020·206d·6173·6b3a·2074··.········mask:·t | |||
| 0005a3 | 0005a300:·7275·650a·3c2f·636f·6465·3e3c·2f70·7265··rue.</code></pre | ||
| 0005a3 | 0005a310:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0005a3 | 0005a320:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0005a3 | 0005a330:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0005a3 | 0005a340:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0005a3 | 0005a350:·7267·6574·3d22·2369·646d·3237·3032·3422··rget="#idm27024" | ||
| 0005a3 | 0005a360:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0005a3 | 0005a370:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0005a3 | 0005a380:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0005a3 | 0005a390:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0005a3 | 0005a3a0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0005a3 | 0005a3b0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0005a3c0:·6f6e·204b·7562·6572·6e65·7465·7320·736e··on·Kubernetes·sn | |||
| 0005a3d0:·6 | 0005a3d0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | 0005a3e0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | 0005a3f0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | 0005a400:·6170·7365·2220·6964·3d22·6964·6d32·3730··apse"·id="idm270 | ||
| 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | 0005a410:·3234·223e·3c74·6162·6c65·2063·6c61·7373··24"><table·class | ||
| 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | 0005a420:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | ||
| 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | 0005a430:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | ||
| 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | 0005a440:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig-v1r1 |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14287, 15 lines modified | Offset 14287, 15 lines modified | ||
| 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037ce0:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037cf0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d00:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d10:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d20:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d30:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d40:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d50:·6173·206f·6620·3230·323 | 00037d50:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d60:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037d70:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037d80:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037d90:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037da0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037db0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037dc0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 23044, 65 lines modified | Offset 23044, 65 lines modified | ||
| 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | 0005a030:·6172·6765·743d·2223·6964·6d32·3730·3233··arget="#idm27023 | ||
| 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0005a040:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0005a050:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0005a060:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0005a070:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0005a080:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0005a090:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0005a0a0:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0005a0a0:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 0005a0b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0005a0 | 0005a0b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0005a0d0 | 0005a0c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0005a0 | 0005a0d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0005a0 | 0005a0e0:·646d·3237·3032·3322·3e3c·7461·626c·6520··dm27023"><table· | ||
| 0005a | 0005a0f0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 0005a1 | 0005a100:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 0005a1 | 0005a110:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 0005a1 | 0005a120:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 0005a1 | 0005a130:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 0005a1 | 0005a140:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0005a1 | 0005a150:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0005a170 | 0005a160:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0005a1 | 0005a170:·6d65·6469·756d·3c2f·7464·3e3c·2f74·723e··medium</td></tr> | ||
| 0005a1 | 0005a180:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0005a1 | 0005a190:·2f74·683e·3c74·643e·7472·7565·3c2f·7464··/th><td>true</td | ||
| 0005a1 | 0005a1a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0005a1 | 0005a1b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0005a1 | 0005a1c0:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | ||
| 0005a1 | 0005a1d0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0005a1 | 0005a1e0:·6f64·653e·6170·6956·6572·7369·6f6e·3a20··ode>apiVersion:· | ||
| 0005a | 0005a1f0:·6d61·6368·696e·6563·6f6e·6669·6775·7261··machineconfigura | ||
| 0005a2 | 0005a200:·7469·6f6e·2e6f·7065·6e73·6869·6674·2e69··tion.openshift.i | ||
| 0005a2 | 0005a210:·6f2f·7631·0a6b·696e·643a·204d·6163·6869··o/v1.kind:·Machi | ||
| 0005a2 | 0005a220:·6e65·436f·6e66·6967·0a73·7065·633a·0a20··neConfig.spec:.· | ||
| 0005a2 | 0005a230:·2063·6f6e·6669·673a·0a20·2020·2069·676e···config:.····ign | ||
| 0005a2 | 0005a240:·6974·696f·6e3a·0a20·2020·2020·2076·6572··ition:.······ver | ||
| 0005a2 | 0005a250:·7369·6f6e·3a20·332e·312e·300a·2020·2020··sion:·3.1.0.···· | ||
| 0005a2 | 0005a260:·7379·7374·656d·643a·0a20·2020·2020·2075··systemd:.······u | ||
| 0005a2 | 0005a270:·6e69·7473·3a0a·2020·2020·2020·2d20·6e61··nits:.······-·na | ||
| 0005a2 | 0005a280:·6d65·3a20·7373·6864·2e73·6572·7669·6365··me:·sshd.service | ||
| 0005a2a0:·2020·2020·2065·6e61·626c·6564·3a20·6661·······enabled:·fa | |||
| 0005a2b0:·6c73·650a·2020·2020·2020·2020·6d61·736b··lse.········mask | |||
| 0005a2c0:·3a20·7472·7565·0a20·2020·2020·202d·206e··:·true.······-·n | |||
| 0005a2d0:·616d·653a·2073·7368·642e·736f·636b·6574··ame:·sshd.socket | |||
| 0005a2 | 0005a290:·0a20·2020·2020·2020·2065·6e61·626c·6564··.········enabled | ||
| 0005a2 | 0005a2a0:·3a20·6661·6c73·650a·2020·2020·2020·2020··:·false.········ | ||
| 0005a2b0:·6d61·736b·3a20·7472·7565·0a20·2020·2020··mask:·true.····· | |||
| 0005a2c0:·202d·206e·616d·653a·2073·7368·642e·736f···-·name:·sshd.so | |||
| 0005a2d0:·636b·6574·0a20·2020·2020·2020·2065·6e61··cket.········ena | |||
| 0005a2e0:·626c·6564·3a20·6661·6c73·650a·2020·2020··bled:·false.···· | |||
| 0005a | 0005a2f0:·2020·2020·6d61·736b·3a20·7472·7565·0a3c······mask:·true.< | ||
| 0005a3 | 0005a300:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | ||
| 0005a3 | 0005a310:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | ||
| 0005a3 | 0005a320:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | ||
| 0005a3 | 0005a330:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | ||
| 0005a3 | 0005a340:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0005a3 | 0005a350:·2223·6964·6d32·3730·3234·2220·7461·6269··"#idm27024"·tabi | ||
| 0005a3 | 0005a360:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0005a3 | 0005a370:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0005a3 | 0005a380:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0005a3 | 0005a390:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0005a3 | 0005a3a0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0005a3 | 0005a3b0:·223e·5265·6d65·6469·6174·696f·6e20·4b75··">Remediation·Ku | ||
| 0005a3c0:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | 0005a3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | 0005a3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | 0005a3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | 0005a400:·2069·643d·2269·646d·3237·3032·3422·3e3c···id="idm27024">< | ||
| 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | 0005a410:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | ||
| 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | 0005a420:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | ||
| 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | 0005a430:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 38 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·CoreOS |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 | 42 | ····*·cpe:/o:redhat:enterprise_linux_coreos:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········2.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 51 | ·········4.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········5.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| Offset 702, 15 lines modified | Offset 702, 15 lines modified | ||
| 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. | 702 | For·more·information·on·how·to·configure·nodes·with·the·Machine·Config·Operator·see·_\x8t_\x8h_\x8e_\x8·_\x8r_\x8e_\x8l_\x8e_\x8v_\x8a_\x8n_\x8t_\x8·_\x8d_\x8o_\x8c_\x8u_\x8m_\x8e_\x8n_\x8t_\x8a_\x8t_\x8i_\x8o_\x8n. |
| 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. | 703 | Rationale:···Red·Hat·Enterprise·Linux·CoreOS·(RHCOS)·is·a·single-purpose·container·operating·system.·RHCOS·is·only·supported·as·a·component·of·the·OpenShift·Container·Platform.·Remote·management·of·the·RHCOS·nodes·is·performed·at·the·OpenShift·Container·Platform·API·level.·As·a·result,·any·direct·remote·access·to·the·RHCOS·nodes·is·unnecessary.·Disabling·the·SSHD·service·helps·reduce·the·number·of·open·ports·on·each·host. |
| 704 | Severity: ···high | 704 | Severity: ···high |
| 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled | 705 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_sshd_disabled |
| 706 | Identifiers:·CCE-86189-8 | 706 | Identifiers:·CCE-86189-8 |
| 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) | 707 | References:··_\x8n_\x8i_\x8s_\x8t········CM-3(6),·IA-2(4) |
| 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 | 708 | ·············_\x8a_\x8p_\x8p_\x8-_\x8s_\x8r_\x8g_\x8-_\x8c_\x8t_\x8r·SRG-APP-000185-CTR-000490,·SRG-APP-000141-CTR-000315,·CNTR-OS-001010,·CNTR-OS-001020,·CNTR-OS-001030 |
| 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 709 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_.c_.r_.i_.p_\x8t_\x8·_\x8⇲ |
| 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 710 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 711 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 712 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 713 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 714 | apiVersion:·machineconfiguration.openshift.io/v1 | 714 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 715 | kind:·MachineConfig | 715 | kind:·MachineConfig |
| 716 | spec: | 716 | spec: |
| Offset 721, 15 lines modified | Offset 721, 15 lines modified | ||
| 721 | ······units: | 721 | ······units: |
| 722 | ······-·name:·sshd.service | 722 | ······-·name:·sshd.service |
| 723 | ········enabled:·false | 723 | ········enabled:·false |
| 724 | ········mask:·true | 724 | ········mask:·true |
| 725 | ······-·name:·sshd.socket | 725 | ······-·name:·sshd.socket |
| 726 | ········enabled:·false | 726 | ········enabled:·false |
| 727 | ········mask:·true | 727 | ········mask:·true |
| 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_. | 728 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_.u_.b_.e_.r_.n_.e_.t_.e_.s_.·_.s_.n_.i_.p_.p_.e_\x8t_\x8·_\x8⇲ |
| 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 729 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 730 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 731 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 732 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 733 | apiVersion:·machineconfiguration.openshift.io/v1 | 733 | apiVersion:·machineconfiguration.openshift.io/v1 |
| 734 | kind:·MachineConfig | 734 | kind:·MachineConfig |
| 735 | spec: | 735 | spec: |
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f00:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f10:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f20:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f30:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f40:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f50:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f60:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f70:·7320·6f66·2032·3032·3 | 00037f70:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f80:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f90:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fa0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fb0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fc0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fd0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fe0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15097, 234 lines modified | Offset 15097, 234 lines modified | ||
| 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | 0003af80:·7461·7267·6574·3d22·2369·646d·3732·3530··target="#idm7250 | ||
| 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003af90:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003afa0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003afb0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003afc0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003afd0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003afe0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003aff0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b000:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b010:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b020:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b030:·7365·2220·6964·3d22·6964·6d37·3235·3022··se"·id="idm7250" | |||
| 0003b040:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b050:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b060:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b070:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b080:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b090:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b0a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b0b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b0c0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b0d0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b0e0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b0f0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b100:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b110:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b120:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b130:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b140:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b150:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b160:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b170:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b180:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b190:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b1a0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b1b0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b1c0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b1d0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b1e0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b1f0:·2043·4345·2d39·3034·3737·2d31·0a20·202d···CCE-90477-1.··- | |||
| 0003b200:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b210:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b220:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b230:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b240:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b250:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b260:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b270:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b280:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b290:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b2a0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b2b0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b2c0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b2d0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b2e0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b2f0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b300:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b310:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b320:·2223·6964·6d37·3235·3122·2074·6162·696e··"#idm7251"·tabin | |||
| 0003b330:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b340:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b350:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b360:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b370:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b380:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b390:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b3a0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b3b0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b3c0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b3d0:·6964·6d37·3235·3122·3e3c·7461·626c·6520··idm7251"><table· | |||
| 0003b3e0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b3f0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b400:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b410:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b420:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b430:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b440:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b450:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b460:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b470:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b480:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b490:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b4a0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b4b0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b4c0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b4d0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b4e0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b4f0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b500:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b510:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b520:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003b530:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003b540:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b550:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b560:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b570:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b580:·7267·6574·3d22·2369·646d·3732·3532·2220··rget="#idm7252"· | |||
| 0003b590:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b5a0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b5b0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b5c0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b5d0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b5e0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003 | 0003aff0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003b | 0003b000:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | ||
| 0003b | 0003b010:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | ||
| 0003b | 0003b020:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | ||
| 0003b | 0003b030:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b | 0003b040:·3d22·6964·6d37·3235·3022·3e3c·7072·653e··="idm7250"><pre> | ||
| 0003b | 0003b050:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | ||
| 0003b | 0003b060:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | ||
| Max diff block lines reached; 5511939/5544009 bytes (99.42%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(enhanced) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 102, 14 lines modified | Offset 102, 33 lines modified | ||
| 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 102 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 103 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 110 | [[packages]] | ||
| 111 | name·=·"aide" | ||
| 112 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 118 | package·--add=aide | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·install·aide | ||
| 109 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 110 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 111 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 112 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 113 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 114 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 115 | ··package: | 131 | ··package: |
| Offset 124, 38 lines modified | Offset 143, 14 lines modified | ||
| 124 | ··-·PCI-DSSv4-11.5.2 | 143 | ··-·PCI-DSSv4-11.5.2 |
| 125 | ··-·enable_strategy | 144 | ··-·enable_strategy |
| 126 | ··-·low_complexity | 145 | ··-·low_complexity |
| 127 | ··-·low_disruption | 146 | ··-·low_disruption |
| 128 | ··-·medium_severity | 147 | ··-·medium_severity |
| 129 | ··-·no_reboot_needed | 148 | ··-·no_reboot_needed |
| 130 | ··-·package_aide_installed | 149 | ··-·package_aide_installed |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | include·install_aide | ||
| 137 | class·install_aide·{ | ||
| 138 | ··package·{·'aide': | ||
| 139 | ····ensure·=>·'installed', | ||
| 140 | ··} | ||
| 141 | } | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | [[packages]] | ||
| 144 | name·=·"aide" | ||
| 145 | version·=·"*" | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | package·install·aide | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 157 | #·Remediation·is·applicable·only·in·certain·platforms | 155 | #·Remediation·is·applicable·only·in·certain·platforms |
| 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 156 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 163, 21 lines modified | Offset 158, 26 lines modified | ||
| 163 | if·!·rpm·-q·--quiet·"aide"·;·then | 158 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 164 | ····dnf·install·-y·"aide" | 159 | ····dnf·install·-y·"aide" |
| 165 | fi | 160 | fi |
| 166 | else | 161 | else |
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 162 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168 | fi | 163 | fi |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 169 | include·install_aide | ||
| 174 | 170 | class·install_aide·{ | |
| 171 | ··package·{·'aide': | ||
| 172 | ····ensure·=>·'installed', | ||
| 173 | ··} | ||
| 174 | } | ||
| 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 175 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 176 | Run·the·following·command·to·generate·a·new·database: | 176 | Run·the·following·command·to·generate·a·new·database: |
| 177 | $·sudo·/usr/sbin/aide·--init | 177 | $·sudo·/usr/sbin/aide·--init |
| 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 178 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 179 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 180 | To·initiate·a·manual·check,·run·the·following·command: | 180 | To·initiate·a·manual·check,·run·the·following·command: |
| 181 | $·sudo·/usr/sbin/aide·--check | 181 | $·sudo·/usr/sbin/aide·--check |
| Offset 316, 46 lines modified | Offset 316, 46 lines modified | ||
| 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 316 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 317 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 318 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 319 | [[customizations.filesystem]] | 319 | [[customizations.filesystem]] |
| 320 | mountpoint·=·"/home" | 320 | mountpoint·=·"/home" |
| 321 | size·=·1073741824 | 321 | size·=·1073741824 |
| 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 323 | logvol·/home·1024 | ||
| 324 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 322 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 279415/285133 bytes (97.99%) of diff not shown. | |||
| Offset 14320, 15 lines modified | Offset 14320, 15 lines modified | ||
| 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ef0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f00:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f10:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f20:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f30:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f40:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f60:·7320·6f66·2032·3032·3 | 00037f60:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f70:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f80:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f90:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fa0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fb0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fc0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fd0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15102, 235 lines modified | Offset 15102, 235 lines modified | ||
| 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003afd0:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003afe0:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003aff0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b000:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b010:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b020:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b030:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b040:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003b050:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b060:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b070:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b080:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b090:·3530·223e·3c74·6162·6c65·2063·6c61·7373··50"><table·class | |||
| 0003b0a0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b0b0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b0c0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b0d0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b0e0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b0f0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b100:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b110:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b120:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b130:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b140:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b150:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b160:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b170:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b180:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b190:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b1a0:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b1b0:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b1c0:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b1d0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b1e0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b1f0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b200:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b210:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b220:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b230:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b240:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b250:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b260:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b270:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b280:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b290:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b2a0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b2b0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b2c0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b2d0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b2e0:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b2f0:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b300:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b310:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b320:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b330:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b340:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b350:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b360:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b370:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b380:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b390:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b3a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b3b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b3c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b3d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b3e0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b3f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b400:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b410:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b420:·643d·2269·646d·3732·3531·223e·3c74·6162··d="idm7251"><tab | |||
| 0003b430:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b440:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b450:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b460:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b470:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b480:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b490:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b4a0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b4d0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b4e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b4f0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b500:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b510:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b520:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b530:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b540:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b550:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b560:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b570:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b580:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b590:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b5a0:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b5b0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b5c0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b5d0:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b5e0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b5f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b600:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b610:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b620:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b630:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b | 0003b040:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b | 0003b050:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b | 0003b060:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b070:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b080:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b090:·2069·643d·2269·646d·3732·3530·223e·3c70···id="idm7250"><p | ||
| 0003b | 0003b0a0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003b | 0003b0b0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | ||
| Max diff block lines reached; 5606656/5638864 bytes (99.43%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(high) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 59 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 60 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 125, 38 lines modified | Offset 144, 14 lines modified | ||
| 125 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 126 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 127 | ··-·low_complexity | 146 | ··-·low_complexity |
| 128 | ··-·low_disruption | 147 | ··-·low_disruption |
| 129 | ··-·medium_severity | 148 | ··-·medium_severity |
| 130 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 131 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 159, 26 lines modified | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | 159 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 165 | ····dnf·install·-y·"aide" | 160 | ····dnf·install·-y·"aide" |
| 166 | fi | 161 | fi |
| 167 | else | 162 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 164 | fi |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_aide | ||
| 175 | 171 | class·install_aide·{ | |
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 181 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 182 | $·sudo·/usr/sbin/aide·--check |
| Offset 800, 46 lines modified | Offset 800, 46 lines modified | ||
| 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 800 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 801 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 802 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 803 | [[customizations.filesystem]] | 803 | [[customizations.filesystem]] |
| 804 | mountpoint·=·"/home" | 804 | mountpoint·=·"/home" |
| 805 | size·=·1073741824 | 805 | size·=·1073741824 |
| 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 807 | logvol·/home·1024 | ||
| 808 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 806 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 290207/295872 bytes (98.09%) of diff not shown. | |||
| Offset 14322, 15 lines modified | Offset 14322, 15 lines modified | ||
| 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037f10:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037f20:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f30:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f40:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f50:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f60:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f70:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f80:·7320·6f66·2032·3032·3 | 00037f80:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f90:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037fa0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037fb0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037fc0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fd0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fe0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037ff0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15093, 234 lines modified | Offset 15093, 234 lines modified | ||
| 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | 0003af40:·6765·743d·2223·6964·6d37·3235·3022·2074··get="#idm7250"·t | ||
| 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 0003af50:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 0003af60:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 0003af70:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 0003af80:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 0003af90:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 0003afa0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 0003afb0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003afc0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003afd0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003afe0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003aff0:·2069·643d·2269·646d·3732·3530·223e·3c74···id="idm7250"><t | |||
| 0003b000:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b010:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b020:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b030:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b040:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b050:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b060:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b070:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b080:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b090:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b0a0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b0b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b0c0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b0d0:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b0e0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b0f0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b100:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b110:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b120:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b130:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b140:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b150:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b160:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b170:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b180:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b190:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b1a0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | |||
| 0003b1b0:·452d·3930·3437·372d·310a·2020·2d20·434a··E-90477-1.··-·CJ | |||
| 0003b1c0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b1d0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b1e0:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b1f0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b200:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b210:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b220:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b230:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b240:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b250:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b260:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b270:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b280:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b290:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b2a0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b2b0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b2c0:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b2d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b2e0:·646d·3732·3531·2220·7461·6269·6e64·6578··dm7251"·tabindex | |||
| 0003b2f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b300:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b310:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b320:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b330:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b340:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b350:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b360:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b370:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b380:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b390:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | |||
| 0003b3a0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3b0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3c0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3d0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3e0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3f0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b400:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b410:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b420:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b430:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b440:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b450:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b460:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b470:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b480:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b490:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b4a0:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b4b0:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| 0003b4c0:·6765·207b·2027·6169·6465·273a·0a20·2020··ge·{·'aide':.··· | |||
| 0003b4d0:·2065·6e73·7572·6520·3d26·6774·3b20·2769···ensure·=>·'i | |||
| 0003b4e0:·6e73·7461·6c6c·6564·272c·0a20·207d·0a7d··nstalled',.··}.} | |||
| 0003b4f0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b500:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b510:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b520:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b530:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b540:·743d·2223·6964·6d37·3235·3222·2074·6162··t="#idm7252"·tab | |||
| 0003b550:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b560:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b570:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b580:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b590:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b5a0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | |||
| 0003 | 0003afb0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | ||
| 0003 | 0003afc0:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | ||
| 0003 | 0003afd0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0003 | 0003afe0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0003 | 0003aff0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0003b | 0003b000:·646d·3732·3530·223e·3c70·7265·3e3c·636f··dm7250"><pre><co | ||
| 0003b | 0003b010:·6465·3e0a·5b5b·7061·636b·6167·6573·5d5d··de>.[[packages]] | ||
| 0003b | 0003b020:·0a6e·616d·6520·3d20·2261·6964·6522·0a76··.name·=·"aide".v | ||
| Max diff block lines reached; 3159560/3191630 bytes (99.00%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(intermediary) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 118, 14 lines modified | Offset 118, 33 lines modified | ||
| 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 118 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 119 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 121 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············6.1.1 | 123 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | [[packages]] | ||
| 127 | name·=·"aide" | ||
| 128 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 134 | package·--add=aide | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·install·aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 130 | -·name:·Ensure·aide·is·installed | 146 | -·name:·Ensure·aide·is·installed |
| 131 | ··package: | 147 | ··package: |
| Offset 140, 38 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | include·install_aide | ||
| 153 | class·install_aide·{ | ||
| 154 | ··package·{·'aide': | ||
| 155 | ····ensure·=>·'installed', | ||
| 156 | ··} | ||
| 157 | } | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 174, 26 lines modified | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | 174 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 180 | ····dnf·install·-y·"aide" | 175 | ····dnf·install·-y·"aide" |
| 181 | fi | 176 | fi |
| 182 | else | 177 | else |
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 184 | fi | 179 | fi |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | ||
| 190 | 186 | class·install_aide·{ | |
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 195 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 196 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 197 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 355, 24 lines modified | Offset 355, 24 lines modified | ||
| 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 | 355 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R28 |
| 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 356 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 357 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 358 | [[customizations.filesystem]] | 358 | [[customizations.filesystem]] |
| 359 | mountpoint·=·"/home" | 359 | mountpoint·=·"/home" |
| 360 | size·=·1073741824 | 360 | size·=·1073741824 |
| 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 362 | logvol·/home·1024 | ||
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 361 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 194331/199938 bytes (97.20%) of diff not shown. | |||
| Offset 14321, 15 lines modified | Offset 14321, 15 lines modified | ||
| 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037f00:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037f10:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037f20:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037f30:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037f40:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037f50:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037f60:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037f70:·2032·3032·3 | 00037f70:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037f80:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037f90:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037fa0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037fb0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037fc0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037fd0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037fe0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14771, 218 lines modified | Offset 14771, 218 lines modified | ||
| 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | 00039b20:·7461·2d74·6172·6765·743d·2223·6964·6d31··ta-target="#idm1 | ||
| 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | 00039b30:·3036·3837·2220·7461·6269·6e64·6578·3d22··0687"·tabindex=" | ||
| 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 00039b40:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 00039b50:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00039b60:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00039b70:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00039b80:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00039b90:·6469·6174·696f·6e20·4 | 00039b90:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00039ba0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00039bb0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00039bc0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00039bd0:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 00039be0:·3036·3837·223e·3c74·6162·6c65·2063·6c61··0687"><table·cla | |||
| 00039bf0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00039c00:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00039c10:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00039c20:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00039c30:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00039c40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00039c50:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00039c60:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00039c70:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00039 | 00039ba0:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 00039bb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00039bc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00039bd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00039be0:·2220·6964·3d22·6964·6d31·3036·3837·223e··"·id="idm10687"> | |||
| 00039bf0:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 00039c00:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 00039c10:·2264·6e66·2d61·7574·6f6d·6174·6963·220a··"dnf-automatic". | |||
| 00039c20:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 00039c30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00039c40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00039c50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00039c60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00039c70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00039c80:·2369·646d·3130·3638·3822·2074·6162·696e··#idm10688"·tabin | |||
| 00039c90:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00039ca0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00039cb0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00039cc0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00039cd0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 00039ce0:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 00039cf0:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 00039d00:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039d10:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039d20:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039d30:·3d22·6964·6d31·3036·3838·223e·3c74·6162··="idm10688"><tab | |||
| 00039d40:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00039d50:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00039d60:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00039d70:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00039d80:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00039d90:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00039da0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00039db0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00039dc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039dd0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00039de0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00039df0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00039e00:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00039 | 00039e10:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | ||
| 00039e20:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00039e30:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 00039ca0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00039cb0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00039cc0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00039cd0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 00039ce0:·6e61·6d65·3a20·456e·7375·7265·2064·6e66··name:·Ensure·dnf | |||
| 00039cf0:·2d61·7574·6f6d·6174·6963·2069·7320·696e··-automatic·is·in | |||
| 00039d00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 00039d10:·653a·0a20·2020·206e·616d·653a·2064·6e66··e:.····name:·dnf | |||
| 00039d20:·2d61·7574·6f6d·6174·6963·0a20·2020·2073··-automatic.····s | |||
| 00039d30:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 00039d40:·7461·6773·3a0a·2020·2d20·4343·452d·3837··tags:.··-·CCE-87 | |||
| 00039d50:·3536·312d·370a·2020·2d20·656e·6162·6c65··561-7.··-·enable | |||
| 00039d60:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00039d70:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00039d80:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00039d90:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00039da0:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00039db0:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00039 | 00039e40:·6464·3d64·6e66·2d61·7574·6f6d·6174·6963··dd=dnf-automatic | ||
| 00039dd0:·6963·5f69·6e73·7461·6c6c·6564·0a3c·2f63··ic_installed.</c | |||
| 00039 | 00039e50:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | ||
| 00039 | 00039e60:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | ||
| 00039e00 | 00039e70:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | ||
| 00039e | 00039e80:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | ||
| 00039e | 00039e90:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00039e | 00039ea0:·743d·2223·6964·6d31·3036·3839·2220·7461··t="#idm10689"·ta | ||
| 00039e | 00039eb0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 00039e | 00039ec0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 00039e | 00039ed0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 00039e | 00039ee0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 00039e | 00039ef0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 00039 | 00039f00:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 00039f10:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00039f20:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00039f30:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00039f40:·6c61·7073·6522·2069·643d·2269·646d·3130··lapse"·id="idm10 | |||
| 00039f50:·3638·3922·3e3c·7461·626c·6520·636c·6173··689"><table·clas | |||
| 00039f60:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00039f70:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00039f80:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00039f90:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00039fa0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00039fb0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00039fc0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00039fd0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00039fe0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00039ff0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| Max diff block lines reached; 370066/399928 bytes (92.53%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·ANSSI-BP-028·(minimal) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 59 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 60 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 84, 14 lines modified | Offset 84, 33 lines modified | ||
| 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 84 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 85 | ·············suitable·for·automatic,·regular·execution. | 85 | ·············suitable·for·automatic,·regular·execution. |
| 86 | Severity: ···medium | 86 | Severity: ···medium |
| 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 87 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 88 | Identifiers:·CCE-87561-7 | 88 | Identifiers:·CCE-87561-7 |
| 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 89 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 90 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 92 | [[packages]] | ||
| 93 | name·=·"dnf-automatic" | ||
| 94 | version·=·"*" | ||
| 95 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 96 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 97 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 98 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 99 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 100 | package·--add=dnf-automatic | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 106 | package·install·dnf-automatic | ||
| 91 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 92 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 93 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 94 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 95 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 96 | -·name:·Ensure·dnf-automatic·is·installed | 112 | -·name:·Ensure·dnf-automatic·is·installed |
| 97 | ··package: | 113 | ··package: |
| Offset 101, 54 lines modified | Offset 120, 35 lines modified | ||
| 101 | ··-·CCE-87561-7 | 120 | ··-·CCE-87561-7 |
| 102 | ··-·enable_strategy | 121 | ··-·enable_strategy |
| 103 | ··-·low_complexity | 122 | ··-·low_complexity |
| 104 | ··-·low_disruption | 123 | ··-·low_disruption |
| 105 | ··-·medium_severity | 124 | ··-·medium_severity |
| 106 | ··-·no_reboot_needed | 125 | ··-·no_reboot_needed |
| 107 | ··-·package_dnf-automatic_installed | 126 | ··-·package_dnf-automatic_installed |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 113 | include·install_dnf-automatic | ||
| 114 | class·install_dnf-automatic·{ | ||
| 115 | ··package·{·'dnf-automatic': | ||
| 116 | ····ensure·=>·'installed', | ||
| 117 | ··} | ||
| 118 | } | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | [[packages]] | ||
| 121 | name·=·"dnf-automatic" | ||
| 122 | version·=·"*" | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·dnf-automatic | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 132 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 135 | ····dnf·install·-y·"dnf-automatic" | 133 | ····dnf·install·-y·"dnf-automatic" |
| 136 | fi | 134 | fi |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | include·install_dnf-automatic | ||
| 141 | class·install_dnf-automatic·{ | ||
| 142 | package· | 142 | ··package·{·'dnf-automatic': |
| 143 | ····ensure·=>·'installed', | ||
| 144 | ··} | ||
| 145 | } | ||
| 143 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 146 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 144 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 147 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 145 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 148 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 146 | automatic.conf. | 149 | automatic.conf. |
| 147 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 150 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 148 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 151 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 149 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 152 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9035, 14 lines modified | Offset 9035, 28 lines modified | ||
| 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9035 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9036 | ····························A.9.1.2 | 9036 | ····························A.9.1.2 |
| 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9037 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9038 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9039 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9040 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9041 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9042 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9043 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9044 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9045 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9046 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9047 | package·--remove=dhcp | ||
| 9048 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9049 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9050 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43275/49230 bytes (87.90%) of diff not shown. | |||
| Offset 14292, 16 lines modified | Offset 14292, 16 lines modified | ||
| 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037d30:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037d40:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037d50:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037d60:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037d70:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037d80:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037d90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037da0:·2861·7320·6f66·2032·3032·3 | 00037da0:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037db0:·3 | 00037db0:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037dc0:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037dd0:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037de0:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037df0:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037e00:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037e10:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037e20:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15135, 235 lines modified | Offset 15135, 235 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | 0003b1f0:·6964·6d37·3235·3022·2074·6162·696e·6465··idm7250"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3732·3530·223e·3c74·6162·6c65·2063··dm7250"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b370:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b380:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3930·3437··gs:.··-·CCE-9047 | |||
| 0003b460:·372d·310a·2020·2d20·434a·4953·2d35·2e31··7-1.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4e49·5354·2d38··0.1.3.··-·NIST-8 | |||
| 0003b480:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b490:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b4a0:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b4b0:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b4c0:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b4d0:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b4e0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b4f0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b500:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b510:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b520:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b530:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b540:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b550:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b560:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b570:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b580:·7461·7267·6574·3d22·2369·646d·3732·3531··target="#idm7251 | |||
| 0003b590:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b5a0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b5b0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b5c0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b5d0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b5e0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b5f0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b600:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b610:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b620:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b630:·6522·2069·643d·2269·646d·3732·3531·223e··e"·id="idm7251"> | |||
| 0003b640:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b650:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b660:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b670:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b680:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b690:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b6a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b6b0:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b6c0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b6d0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b6e0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b6f0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b700:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b710:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b720:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b730:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b740:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b750:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b760:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b770:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b780:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b790:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b7a0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b7b0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b7c0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b7d0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b7e0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b7f0:·6d37·3235·3222·2074·6162·696e·6465·783d··m7252"·tabindex= | |||
| 0003b800:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b810:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b820:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b830:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b840:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b | 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b | 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | ||
| 0003b | 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | ||
| 0003b | 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | ||
| 0003b | 0003b2a0:·7073·6522·2069·643d·2269·646d·3732·3530··pse"·id="idm7250 | ||
| 0003b | 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | ||
| Max diff block lines reached; 7536193/7568539 bytes (99.57%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 108, 14 lines modified | Offset 108, 33 lines modified | ||
| 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 108 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 109 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | [[packages]] | ||
| 117 | name·=·"aide" | ||
| 118 | version·=·"*" | ||
| 119 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 120 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 121 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 122 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 123 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 124 | package·--add=aide | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·install·aide | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 120 | -·name:·Ensure·aide·is·installed | 136 | -·name:·Ensure·aide·is·installed |
| 121 | ··package: | 137 | ··package: |
| Offset 130, 38 lines modified | Offset 149, 14 lines modified | ||
| 130 | ··-·PCI-DSSv4-11.5.2 | 149 | ··-·PCI-DSSv4-11.5.2 |
| 131 | ··-·enable_strategy | 150 | ··-·enable_strategy |
| 132 | ··-·low_complexity | 151 | ··-·low_complexity |
| 133 | ··-·low_disruption | 152 | ··-·low_disruption |
| 134 | ··-·medium_severity | 153 | ··-·medium_severity |
| 135 | ··-·no_reboot_needed | 154 | ··-·no_reboot_needed |
| 136 | ··-·package_aide_installed | 155 | ··-·package_aide_installed |
| 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 142 | include·install_aide | ||
| 143 | class·install_aide·{ | ||
| 144 | ··package·{·'aide': | ||
| 145 | ····ensure·=>·'installed', | ||
| 146 | ··} | ||
| 147 | } | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 149 | [[packages]] | ||
| 150 | name·=·"aide" | ||
| 151 | version·=·"*" | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | package·install·aide | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 161 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 169, 21 lines modified | Offset 164, 26 lines modified | ||
| 169 | if·!·rpm·-q·--quiet·"aide"·;·then | 164 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 170 | ····dnf·install·-y·"aide" | 165 | ····dnf·install·-y·"aide" |
| 171 | fi | 166 | fi |
| 172 | else | 167 | else |
| 173 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 174 | fi | 169 | fi |
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | include·install_aide | ||
| 180 | 176 | class·install_aide·{ | |
| 177 | ··package·{·'aide': | ||
| 178 | ····ensure·=>·'installed', | ||
| 179 | ··} | ||
| 180 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 182 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/sbin/aide·--init | 183 | $·sudo·/usr/sbin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 185 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 185 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 186 | To·initiate·a·manual·check,·run·the·following·command: | 186 | To·initiate·a·manual·check,·run·the·following·command: |
| 187 | $·sudo·/usr/sbin/aide·--check | 187 | $·sudo·/usr/sbin/aide·--check |
| Offset 653, 39 lines modified | Offset 653, 14 lines modified | ||
| 653 | ·············_\x8i_\x8s_\x8m······1446 | 653 | ·············_\x8i_\x8s_\x8m······1446 |
| 654 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 654 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 655 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 655 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 656 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 656 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 657 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 657 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 658 | ·············_\x8c_\x8i_\x8s······1.6.1 | 658 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 659 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 659 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 660 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 661 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 662 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 663 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 491723/498300 bytes (98.68%) of diff not shown. | |||
| Offset 14293, 15 lines modified | Offset 14293, 15 lines modified | ||
| 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037d40:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037d50:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037d60:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037d70:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037d80:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037d90:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037da0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037db0:·2032·3032·3 | 00037db0:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037dc0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037dd0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037de0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037df0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e00:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037e10:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037e20:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15104, 235 lines modified | Offset 15104, 235 lines modified | ||
| 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003aff0:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b000:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b010:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b020:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b030:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b040:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b050:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b060:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b070:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b080:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b090:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b0a0:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b0b0:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b0c0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b0d0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b0e0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b0f0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b100:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b110:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b120:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b130:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b140:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b150:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b160:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b170:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b180:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b190:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b1a0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b1b0:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b1c0:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b1d0:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b1e0:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b1f0:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b200:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b210:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b220:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b230:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b240:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b250:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b260:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b270:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b280:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b290:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b2a0:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b2b0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b2c0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b2d0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b2e0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b2f0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b300:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b310:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b320:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b330:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b340:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b350:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b360:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b370:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b380:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b390:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 0003b3a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b3b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b3c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b3d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b3e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b3f0:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b400:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b410:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b420:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b430:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b440:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | |||
| 0003b450:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b460:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b470:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b480:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b490:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b4a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b4b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b4c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b4d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b4e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b4f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b500:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b510:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b520:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b530:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b540:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b550:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b560:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b570:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b580:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b590:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b5a0:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b5b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b5c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b5d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b5e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b5f0:·7461·7267·6574·3d22·2369·646d·3732·3532··target="#idm7252 | |||
| 0003b600:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b610:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b620:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b630:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b640:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b650:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b060:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b | 0003b070:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 0003b | 0003b080:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b090:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b0a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b0b0:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | ||
| 0003b | 0003b0c0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| 0003b | 0003b0d0:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | ||
| Max diff block lines reached; 4311048/4343256 bytes (99.26%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Server | 41 | ··············Server |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 103 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 104 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 125, 38 lines modified | Offset 144, 14 lines modified | ||
| 125 | ··-·PCI-DSSv4-11.5.2 | 144 | ··-·PCI-DSSv4-11.5.2 |
| 126 | ··-·enable_strategy | 145 | ··-·enable_strategy |
| 127 | ··-·low_complexity | 146 | ··-·low_complexity |
| 128 | ··-·low_disruption | 147 | ··-·low_disruption |
| 129 | ··-·medium_severity | 148 | ··-·medium_severity |
| 130 | ··-·no_reboot_needed | 149 | ··-·no_reboot_needed |
| 131 | ··-·package_aide_installed | 150 | ··-·package_aide_installed |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | include·install_aide | ||
| 138 | class·install_aide·{ | ||
| 139 | ··package·{·'aide': | ||
| 140 | ····ensure·=>·'installed', | ||
| 141 | ··} | ||
| 142 | } | ||
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | [[packages]] | ||
| 145 | name·=·"aide" | ||
| 146 | version·=·"*" | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | package·install·aide | ||
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 158 | #·Remediation·is·applicable·only·in·certain·platforms | 156 | #·Remediation·is·applicable·only·in·certain·platforms |
| 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 164, 21 lines modified | Offset 159, 26 lines modified | ||
| 164 | if·!·rpm·-q·--quiet·"aide"·;·then | 159 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 165 | ····dnf·install·-y·"aide" | 160 | ····dnf·install·-y·"aide" |
| 166 | fi | 161 | fi |
| 167 | else | 162 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 163 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 164 | fi |
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | include·install_aide | ||
| 175 | 171 | class·install_aide·{ | |
| 172 | ··package·{·'aide': | ||
| 173 | ····ensure·=>·'installed', | ||
| 174 | ··} | ||
| 175 | } | ||
| 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 176 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 177 | Run·the·following·command·to·generate·a·new·database: | 177 | Run·the·following·command·to·generate·a·new·database: |
| 178 | $·sudo·/usr/sbin/aide·--init | 178 | $·sudo·/usr/sbin/aide·--init |
| 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 179 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 180 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 181 | To·initiate·a·manual·check,·run·the·following·command: | 181 | To·initiate·a·manual·check,·run·the·following·command: |
| 182 | $·sudo·/usr/sbin/aide·--check | 182 | $·sudo·/usr/sbin/aide·--check |
| Offset 648, 39 lines modified | Offset 648, 14 lines modified | ||
| 648 | ·············_\x8i_\x8s_\x8m······1446 | 648 | ·············_\x8i_\x8s_\x8m······1446 |
| 649 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 649 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 650 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 650 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 651 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 651 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 652 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 652 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 653 | ·············_\x8c_\x8i_\x8s······1.6.1 | 653 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 654 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 654 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 348803/355390 bytes (98.15%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15095, 235 lines modified | Offset 15095, 235 lines modified | ||
| 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | 0003af60:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | ||
| 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | 0003af70:·3235·3022·2074·6162·696e·6465·783d·2230··250"·tabindex="0 | ||
| 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003af80:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003af90:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003afa0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003afb0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003afc0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003afd0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 0003afe0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003aff0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b000:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b010:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 0003b020:·3530·223e·3c74·6162·6c65·2063·6c61·7373··50"><table·class | |||
| 0003b030:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b040:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b050:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b060:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b070:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b080:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b090:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b0a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b0b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b0c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b0d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b0e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b0f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b100:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b110:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b120:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b130:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b140:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b150:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b160:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b170:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b180:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b190:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b1a0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b1b0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b1c0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b1d0:·2020·2d20·4343·452d·3930·3437·372d·310a····-·CCE-90477-1. | |||
| 0003b1e0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b1f0:·330a·2020·2d20·4e49·5354·2d38·3030·2d35··3.··-·NIST-800-5 | |||
| 0003b200:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b210:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b220:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b230:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b240:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b250:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b260:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b270:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b280:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b290:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b2a0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 0003b2b0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 0003b2c0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b2d0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b2e0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b2f0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b300:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 0003b310:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b320:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b330:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b340:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b350:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b360:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b370:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 0003b380:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b390:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b3a0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b3b0:·643d·2269·646d·3732·3531·223e·3c74·6162··d="idm7251"><tab | |||
| 0003b3c0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b3d0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b3e0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b3f0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b400:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b410:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b420:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b430:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b440:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b450:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b460:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b470:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003b480:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b490:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b4a0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b4b0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 0003b4c0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 0003b4d0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 0003b4e0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 0003b4f0:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 0003b500:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 0003b510:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 0003b520:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b530:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b540:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b550:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b560:·2d74·6172·6765·743d·2223·6964·6d37·3235··-target="#idm725 | |||
| 0003b570:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003b580:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b590:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b5a0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b5b0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b5c0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003 | 0003afd0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003 | 0003afe0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003 | 0003aff0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | ||
| 0003b | 0003b000:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | ||
| 0003b | 0003b010:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | ||
| 0003b | 0003b020:·2069·643d·2269·646d·3732·3530·223e·3c70···id="idm7250"><p | ||
| 0003b | 0003b030:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | ||
| 0003b | 0003b040:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | ||
| Max diff block lines reached; 4011408/4043616 bytes (99.20%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·1·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 101, 14 lines modified | Offset 101, 33 lines modified | ||
| 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 101 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 102 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 109 | [[packages]] | ||
| 110 | name·=·"aide" | ||
| 111 | version·=·"*" | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 117 | package·--add=aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | package·install·aide | ||
| 108 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 109 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 110 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 111 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 112 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 113 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 114 | ··package: | 130 | ··package: |
| Offset 123, 38 lines modified | Offset 142, 14 lines modified | ||
| 123 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 124 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 125 | ··-·low_complexity | 144 | ··-·low_complexity |
| 126 | ··-·low_disruption | 145 | ··-·low_disruption |
| 127 | ··-·medium_severity | 146 | ··-·medium_severity |
| 128 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 129 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | include·install_aide | ||
| 136 | class·install_aide·{ | ||
| 137 | ··package·{·'aide': | ||
| 138 | ····ensure·=>·'installed', | ||
| 139 | ··} | ||
| 140 | } | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | [[packages]] | ||
| 143 | name·=·"aide" | ||
| 144 | version·=·"*" | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | package·install·aide | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 162, 21 lines modified | Offset 157, 26 lines modified | ||
| 162 | if·!·rpm·-q·--quiet·"aide"·;·then | 157 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 163 | ····dnf·install·-y·"aide" | 158 | ····dnf·install·-y·"aide" |
| 164 | fi | 159 | fi |
| 165 | else | 160 | else |
| 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 161 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 167 | fi | 162 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 168 | include·install_aide | ||
| 173 | 169 | class·install_aide·{ | |
| 170 | ··package·{·'aide': | ||
| 171 | ····ensure·=>·'installed', | ||
| 172 | ··} | ||
| 173 | } | ||
| 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 174 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 175 | Run·the·following·command·to·generate·a·new·database: | 175 | Run·the·following·command·to·generate·a·new·database: |
| 176 | $·sudo·/usr/sbin/aide·--init | 176 | $·sudo·/usr/sbin/aide·--init |
| 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 177 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 178 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 179 | To·initiate·a·manual·check,·run·the·following·command: | 179 | To·initiate·a·manual·check,·run·the·following·command: |
| 180 | $·sudo·/usr/sbin/aide·--check | 180 | $·sudo·/usr/sbin/aide·--check |
| Offset 646, 39 lines modified | Offset 646, 14 lines modified | ||
| 646 | ·············_\x8i_\x8s_\x8m······1446 | 646 | ·············_\x8i_\x8s_\x8m······1446 |
| 647 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 647 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 648 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 648 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 649 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 649 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 650 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 650 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 651 | ·············_\x8c_\x8i_\x8s······1.6.1 | 651 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 652 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 652 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 318831/325428 bytes (97.97%) of diff not shown. | |||
| Offset 14294, 15 lines modified | Offset 14294, 15 lines modified | ||
| 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037d50:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037d60:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037d70:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037d80:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037d90:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037da0:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037db0:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037dc0:·3230·323 | 00037dc0:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037dd0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037de0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037df0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e00:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e10:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e20:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037e30:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15127, 234 lines modified | Offset 15127, 234 lines modified | ||
| 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | 0003b160:·6574·3d22·2369·646d·3732·3530·2220·7461··et="#idm7250"·ta | ||
| 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b170:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b180:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b190:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b1a0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b1b0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b1c0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b1d0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b1e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b1f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b200:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b210:·6964·3d22·6964·6d37·3235·3022·3e3c·7461··id="idm7250"><ta | |||
| 0003b220:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b230:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b240:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b250:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b260:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b270:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b280:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b290:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b2a0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b2b0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b2c0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b2d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b2e0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b2f0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b300:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b310:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b320:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b330:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b340:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b350:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b360:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b370:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b380:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b390:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b3a0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b3b0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b3c0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b3d0:·2d39·3034·3737·2d31·0a20·202d·2043·4a49··-90477-1.··-·CJI | |||
| 0003b3e0:·532d·352e·3130·2e31·2e33·0a20·202d·204e··S-5.10.1.3.··-·N | |||
| 0003b3f0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b400:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003b410:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003b420:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003b430:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003b440:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 0003b450:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 0003b460:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 0003b470:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 0003b480:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 0003b490:·2020·2d20·7061·636b·6167·655f·6169·6465····-·package_aide | |||
| 0003b4a0:·5f69·6e73·7461·6c6c·6564·0a3c·2f63·6f64··_installed.</cod | |||
| 0003b4b0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b4c0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b4d0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b4e0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b4f0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b500:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 0003b510:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b520:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b530:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b540:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b550:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b560:·6564·6961·7469·6f6e·2050·7570·7065·7420··ediation·Puppet· | |||
| 0003b570:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b580:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b590:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b5a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003b5b0:·3235·3122·3e3c·7461·626c·6520·636c·6173··251"><table·clas | |||
| 0003b5c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b5d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b5e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b5f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b600:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b610:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b620:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b630:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b640:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b650:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b660:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b670:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b680:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b690:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b6a0:·653e·3c70·7265·3e3c·636f·6465·3e69·6e63··e><pre><code>inc | |||
| 0003b6b0:·6c75·6465·2069·6e73·7461·6c6c·5f61·6964··lude·install_aid | |||
| 0003b6c0:·650a·0a63·6c61·7373·2069·6e73·7461·6c6c··e..class·install | |||
| 0003b6d0:·5f61·6964·6520·7b0a·2020·7061·636b·6167··_aide·{.··packag | |||
| 0003b6e0:·6520·7b20·2761·6964·6527·3a0a·2020·2020··e·{·'aide':.···· | |||
| 0003b6f0:·656e·7375·7265·203d·2667·743b·2027·696e··ensure·=>·'in | |||
| 0003b700:·7374·616c·6c65·6427·2c0a·2020·7d0a·7d0a··stalled',.··}.}. | |||
| 0003b710:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b720:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b730:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b740:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b750:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b760:·3d22·2369·646d·3732·3532·2220·7461·6269··="#idm7252"·tabi | |||
| 0003b770:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b780:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b790:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b7a0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b7b0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b7c0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | |||
| 0003b | 0003b1d0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b | 0003b1e0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | ||
| 0003b | 0003b1f0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003b | 0003b200:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003b | 0003b210:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003b | 0003b220:·6d37·3235·3022·3e3c·7072·653e·3c63·6f64··m7250"><pre><cod | ||
| 0003b | 0003b230:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | ||
| 0003b | 0003b240:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | ||
| Max diff block lines reached; 7388896/7420966 bytes (99.57%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·CIS·Red·Hat·Enterprise·Linux·10·Benchmark·for·Level·2·- |
| 41 | ··············Workstation | 41 | ··············Workstation |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:redhat:enterprise_linux:10 | 44 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 52 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 33 lines modified | ||
| 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 106 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 107 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 109 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8c_\x8i_\x8s············6.1.1 | 111 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 112 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 135 | ··package: |
| Offset 128, 38 lines modified | Offset 147, 14 lines modified | ||
| 128 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 129 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 149 | ··-·low_complexity |
| 131 | ··-·low_disruption | 150 | ··-·low_disruption |
| 132 | ··-·medium_severity | 151 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 134 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | include·install_aide | ||
| 141 | class·install_aide·{ | ||
| 142 | ··package·{·'aide': | ||
| 143 | ····ensure·=>·'installed', | ||
| 144 | ··} | ||
| 145 | } | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 162, 26 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 162 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····dnf·install·-y·"aide" | 163 | ····dnf·install·-y·"aide" |
| 169 | fi | 164 | fi |
| 170 | else | 165 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 167 | fi |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 651, 39 lines modified | Offset 651, 14 lines modified | ||
| 651 | ·············_\x8i_\x8s_\x8m······1446 | 651 | ·············_\x8i_\x8s_\x8m······1446 |
| 652 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 652 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 653 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 653 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 654 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 654 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 655 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 655 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 656 | ·············_\x8c_\x8i_\x8s······1.6.1 | 656 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 657 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 657 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 658 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 659 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 660 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 661 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 474972/481569 bytes (98.63%) of diff not shown. | |||
| Offset 14306, 15 lines modified | Offset 14306, 15 lines modified | ||
| 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037e10:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037e20:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037e30:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037e40:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e50:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e60:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e70:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e80:·3032·3 | 00037e80:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e90:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037ea0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037eb0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037ec0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037ed0:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037ee0:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ef0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16612, 242 lines modified | Offset 16612, 242 lines modified | ||
| 00040e30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00040e30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00040e40:·743d·2223·6964·6d37·3933·3722·2074·6162··t="#idm7937"·tab | 00040e40:·743d·2223·6964·6d37·3933·3722·2074·6162··t="#idm7937"·tab | ||
| 00040e50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00040e50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00040e60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00040e60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00040e70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00040e70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00040e80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00040e80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 00040e90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 00040e90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 00040ea0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 00040ea0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | ||
| 00040eb0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00040ec0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040ed0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040ee0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040ef0:·643d·2269·646d·3739·3337·223e·3c74·6162··d="idm7937"><tab | |||
| 00040f00:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040f10:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040f20:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040f30:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040f40:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040eb0:·7562·6572·6e65·7465·7320·736e·6970·7065··ubernetes·snippe | |||
| 00040ec0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00040ed0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00040ee0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00040ef0:·2220·6964·3d22·6964·6d37·3933·3722·3e3c··"·id="idm7937">< | |||
| 00040f00:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00040f10:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00040f20:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00040f30:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00040f40:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00040f50:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00040f60:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040f70:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00040f | 00040f50:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00040f90:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 00040f | 00040f60:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | ||
| 00040f70:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040f80:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040f90:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040fa0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00040fb0:· | 00040fb0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 00040fc0:· | 00040fc0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 00040fd0:· | 00040fd0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 00040fe0:· | 00040fe0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 00040ff0:·653e·3c63·6f64·653e·2d2d·2d0a·6170·6956··e><code>---.apiV | |||
| 00041000:·6572·7369·6f6e·3a20·6d61·6368·696e·6563··ersion:·machinec | |||
| 00041010:·6f6e·6669·6775·7261·7469·6f6e·2e6f·7065··onfiguration.ope | |||
| 00041020:·6e73·6869·6674·2e69·6f2f·7631·0a6b·696e··nshift.io/v1.kin | |||
| 00041030:·643a·204d·6163·6869·6e65·436f·6e66·6967··d:·MachineConfig | |||
| 00041040:·0a73·7065·633a·0a20·2063·6f6e·6669·673a··.spec:.··config: | |||
| 00041050:·0a20·2020·2069·676e·6974·696f·6e3a·0a20··.····ignition:.· | |||
| 00041060:·2020·2020·2076·6572·7369·6f6e·3a20·332e·······version:·3. | |||
| 00041070:·312e·300a·2020·2020·7379·7374·656d·643a··1.0.····systemd: | |||
| 00041080:·0a20·2020·2020·2075·6e69·7473·3a0a·2020··.······units:.·· | |||
| 00041090:·2020·2020·2020·2d20·6e61·6d65·3a20·636f········-·name:·co | |||
| 000410a0:·6e66·6967·7572·652d·6372·7970·746f·2d70··nfigure-crypto-p | |||
| 000410b0:·6f6c·6963·792e·7365·7276·6963·650a·2020··olicy.service.·· | |||
| 000410c0:·2020·2020·2020·2020·656e·6162·6c65·643a··········enabled: | |||
| 000410d0:·2074·7275·650a·2020·2020·2020·2020·2020···true.·········· | |||
| 000410e0:·636f·6e74·656e·7473·3a20·7c0a·2020·2020··contents:·|.···· | |||
| 000410f0:·2020·2020·2020·2020·5b55·6e69·745d·0a20··········[Unit].· | |||
| 00041100:·2020·2020·2020·2020·2020·2042·6566·6f72·············Befor | |||
| 00041110:·653d·6b75·6265·6c65·742e·7365·7276·6963··e=kubelet.servic | |||
| 00041120:·650a·2020·2020·2020·2020·2020·2020·5b53··e.············[S | |||
| 00041130:·6572·7669·6365·5d0a·2020·2020·2020·2020··ervice].········ | |||
| 00041140:·2020·2020·5479·7065·3d6f·6e65·7368·6f74······Type=oneshot | |||
| 00041150:·0a20·2020·2020·2020·2020·2020·2045·7865··.············Exe | |||
| 00041160:·6353·7461·7274·3d75·7064·6174·652d·6372··cStart=update-cr | |||
| 00041170:·7970·746f·2d70·6f6c·6963·6965·7320·2d2d··ypto-policies·-- | |||
| 00041180:·7365·7420·7b7b·2e76·6172·5f73·7973·7465··set·{{.var_syste | |||
| 00041190:·6d5f·6372·7970·746f·5f70·6f6c·6963·797d··m_crypto_policy} | |||
| 000411a0:·7d0a·2020·2020·2020·2020·2020·2020·5265··}.············Re | |||
| 000411b0:·6d61·696e·4166·7465·7245·7869·743d·7965··mainAfterExit=ye | |||
| 000411c0:·730a·2020·2020·2020·2020·2020·2020·5b49··s.············[I | |||
| 000411d0:·6e73·7461·6c6c·5d0a·2020·2020·2020·2020··nstall].········ | |||
| 000411e0:·2020·2020·5761·6e74·6564·4279·3d6d·756c······WantedBy=mul | |||
| 000411f0:·7469·2d75·7365·722e·7461·7267·6574·0a3c··ti-user.target.< | |||
| 00041200:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00041210:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00041220:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00041230:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00041240:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00041250:·2223·6964·6d37·3933·3822·2074·6162·696e··"#idm7938"·tabin | |||
| 00041260:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00041270:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00041280:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00041290:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 000412a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000412b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 000412c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 000412d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000412e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000412f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041300:·2269·646d·3739·3338·223e·3c74·6162·6c65··"idm7938"><table | |||
| 00041310:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041320:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041330:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041340:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041350:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041360:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041370:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00041380:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00041390:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 000413a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000413b0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 000413c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 000413d0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | |||
| 000413e0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | |||
| 000413f0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0004 | 00040ff0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 00041 | 00041000:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 00041 | 00041010:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00041 | 00041020:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| Max diff block lines reached; 2591595/2624769 bytes (98.74%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:10 | 46 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 423, 39 lines modified | Offset 423, 14 lines modified | ||
| 423 | ·············_\x8i_\x8s_\x8m······1446 | 423 | ·············_\x8i_\x8s_\x8m······1446 |
| 424 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 424 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 425 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 425 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 426 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 426 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 428 | ·············_\x8c_\x8i_\x8s······1.6.1 | 428 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 429 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 429 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 430 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 431 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 432 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 433 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 434 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 435 | --- | ||
| 436 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 437 | kind:·MachineConfig | ||
| 438 | spec: | ||
| 439 | ··config: | ||
| 440 | ····ignition: | ||
| 441 | ······version:·3.1.0 | ||
| 442 | ····systemd: | ||
| 443 | ······units: | ||
| 444 | ········-·name:·configure-crypto-policy.service | ||
| 445 | ··········enabled:·true | ||
| 446 | ··········contents:·| | ||
| 447 | ············[Unit] | ||
| 448 | ············Before=kubelet.service | ||
| 449 | ············[Service] | ||
| 450 | ············Type=oneshot | ||
| 451 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 452 | ············RemainAfterExit=yes | ||
| 453 | ············[Install] | ||
| 454 | ············WantedBy=multi-user.target | ||
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 430 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 431 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 432 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 433 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 434 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 460 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 435 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 461 | ··set_fact: | 436 | ··set_fact: |
| Offset 519, 14 lines modified | Offset 494, 39 lines modified | ||
| 519 | » echo·"to·see·what·package·to·(re)install"·>&2 | 494 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 520 | » false··#·end·with·an·error·code | 495 | » false··#·end·with·an·error·code |
| 521 | elif·test·"$rc"·!=·0;·then | 496 | elif·test·"$rc"·!=·0;·then |
| 522 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 497 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 523 | » false··#·end·with·an·error·code | 498 | » false··#·end·with·an·error·code |
| 524 | fi | 499 | fi |
| 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 505 | --- | ||
| 506 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 507 | kind:·MachineConfig | ||
| 508 | spec: | ||
| 509 | ··config: | ||
| 510 | ····ignition: | ||
| 511 | ······version:·3.1.0 | ||
| 512 | ····systemd: | ||
| 513 | ······units: | ||
| 514 | ········-·name:·configure-crypto-policy.service | ||
| 515 | ··········enabled:·true | ||
| 516 | ··········contents:·| | ||
| 517 | ············[Unit] | ||
| 518 | ············Before=kubelet.service | ||
| 519 | ············[Service] | ||
| 520 | ············Type=oneshot | ||
| 521 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 522 | ············RemainAfterExit=yes | ||
| 523 | ············[Install] | ||
| 524 | ············WantedBy=multi-user.target | ||
| 525 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 525 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 526 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 526 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 527 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 527 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 528 | Severity: ···medium | 528 | Severity: ···medium |
| 529 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 529 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 530 | Identifiers:·CCE-88557-4 | 530 | Identifiers:·CCE-88557-4 |
| 531 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 531 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 865, 14 lines modified | Offset 865, 33 lines modified | ||
| 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 865 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 866 | The·rear·package·can·be·installed·with·the·following·command: | 866 | The·rear·package·can·be·installed·with·the·following·command: |
| 867 | $·sudo·dnf·install·rear | 867 | $·sudo·dnf·install·rear |
| 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 868 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 869 | Severity: ···medium | 869 | Severity: ···medium |
| 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 870 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 871 | Identifiers:·CCE-90643-8 | 871 | Identifiers:·CCE-90643-8 |
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 873 | [[packages]] | ||
| 874 | name·=·"rear" | ||
| 875 | version·=·"*" | ||
| 876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 877 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 878 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 879 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 880 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 881 | package·--add=rear | ||
| 882 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 883 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 884 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 885 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 886 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 887 | package·install·rear | ||
| 872 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 888 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 873 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 889 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 874 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 890 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 875 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 891 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 876 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 892 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 153286/159491 bytes (96.11%) of diff not shown. | |||
| Offset 14325, 16 lines modified | Offset 14325, 16 lines modified | ||
| 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f40:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f50:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f60:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f70:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f80:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f90:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037fa0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fb0:·2028·6173·206f·6620·3230·323 | 00037fb0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037fc0:·323 | 00037fc0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fd0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fe0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037ff0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038000:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038010:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038020:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038030:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16677, 240 lines modified | Offset 16677, 240 lines modified | ||
| 00041240:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00041240:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00041250:·646d·3739·3337·2220·7461·6269·6e64·6578··dm7937"·tabindex | 00041250:·646d·3739·3337·2220·7461·6269·6e64·6578··dm7937"·tabindex | ||
| 00041260:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00041260:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00041270:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00041270:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00041280:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00041280:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00041290:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00041290:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000412a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000412a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000412b0:·6d65·6469·6174·696f·6e20·4 | 000412b0:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 000412c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 000412d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000412e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 000412f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041300:·6d37·3933·3722·3e3c·7461·626c·6520·636c··m7937"><table·cl | |||
| 00041310:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041320:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041330:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041340:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041350:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000412c0:·6574·6573·2073·6e69·7070·6574·20e2·87b2··etes·snippet·... | |||
| 000412d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000412e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000412f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00041300:·2269·646d·3739·3337·223e·3c74·6162·6c65··"idm7937"><table | |||
| 00041310:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 00041320:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 00041330:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 00041340:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00041350:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00041360:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00041370:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00041380:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 000413 | 00041360:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 000413a0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 000413 | 00041370:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | ||
| 00041380:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00041390:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000413a0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000413b0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000413c0:· | 000413c0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | ||
| 000413d0:· | 000413d0:·6779·3a3c·2f74·683e·3c74·643e·7265·7374··gy:</th><td>rest | ||
| 000413e0:·7 | 000413e0:·7269·6374·3c2f·7464·3e3c·2f74·723e·3c2f··rict</td></tr></ | ||
| 000413f0:· | 000413f0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 00041400:·6465·3e2d·2d2d·0a61·7069·5665·7273·696f··de>---.apiVersio | |||
| 00041410:·6e3a·206d·6163·6869·6e65·636f·6e66·6967··n:·machineconfig | |||
| 00041420:·7572·6174·696f·6e2e·6f70·656e·7368·6966··uration.openshif | |||
| 00041430:·742e·696f·2f76·310a·6b69·6e64·3a20·4d61··t.io/v1.kind:·Ma | |||
| 00041440:·6368·696e·6543·6f6e·6669·670a·7370·6563··chineConfig.spec | |||
| 00041450:·3a0a·2020·636f·6e66·6967·3a0a·2020·2020··:.··config:.···· | |||
| 00041460:·6967·6e69·7469·6f6e·3a0a·2020·2020·2020··ignition:.······ | |||
| 00041470:·7665·7273·696f·6e3a·2033·2e31·2e30·0a20··version:·3.1.0.· | |||
| 00041480:·2020·2073·7973·7465·6d64·3a0a·2020·2020·····systemd:.···· | |||
| 00041490:·2020·756e·6974·733a·0a20·2020·2020·2020····units:.······· | |||
| 000414a0:·202d·206e·616d·653a·2063·6f6e·6669·6775···-·name:·configu | |||
| 000414b0:·7265·2d63·7279·7074·6f2d·706f·6c69·6379··re-crypto-policy | |||
| 000414c0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 000414d0:·2020·2065·6e61·626c·6564·3a20·7472·7565·····enabled:·true | |||
| 000414e0:·0a20·2020·2020·2020·2020·2063·6f6e·7465··.··········conte | |||
| 000414f0:·6e74·733a·207c·0a20·2020·2020·2020·2020··nts:·|.········· | |||
| 00041500:·2020·205b·556e·6974·5d0a·2020·2020·2020·····[Unit].······ | |||
| 00041510:·2020·2020·2020·4265·666f·7265·3d6b·7562········Before=kub | |||
| 00041520:·656c·6574·2e73·6572·7669·6365·0a20·2020··elet.service.··· | |||
| 00041530:·2020·2020·2020·2020·205b·5365·7276·6963···········[Servic | |||
| 00041540:·655d·0a20·2020·2020·2020·2020·2020·2054··e].············T | |||
| 00041550:·7970·653d·6f6e·6573·686f·740a·2020·2020··ype=oneshot.···· | |||
| 00041560:·2020·2020·2020·2020·4578·6563·5374·6172··········ExecStar | |||
| 00041570:·743d·7570·6461·7465·2d63·7279·7074·6f2d··t=update-crypto- | |||
| 00041580:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 00041590:·7b2e·7661·725f·7379·7374·656d·5f63·7279··{.var_system_cry | |||
| 000415a0:·7074·6f5f·706f·6c69·6379·7d7d·0a20·2020··pto_policy}}.··· | |||
| 000415b0:·2020·2020·2020·2020·2052·656d·6169·6e41···········RemainA | |||
| 000415c0:·6674·6572·4578·6974·3d79·6573·0a20·2020··fterExit=yes.··· | |||
| 000415d0:·2020·2020·2020·2020·205b·496e·7374·616c···········[Instal | |||
| 000415e0:·6c5d·0a20·2020·2020·2020·2020·2020·2057··l].············W | |||
| 000415f0:·616e·7465·6442·793d·6d75·6c74·692d·7573··antedBy=multi-us | |||
| 00041600:·6572·2e74·6172·6765·740a·3c2f·636f·6465··er.target.</code | |||
| 00041610:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00041620:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00041630:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00041640:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00041650:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00041660:·3739·3338·2220·7461·6269·6e64·6578·3d22··7938"·tabindex=" | |||
| 00041670:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00041680:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00041690:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 000416a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 000416b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 000416c0:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 000416d0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 000416e0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 000416f0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00041700:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00041710:·3933·3822·3e3c·7461·626c·6520·636c·6173··938"><table·clas | |||
| 00041720:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00041730:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00041740:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00041750:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00041760:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00041770:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00041780:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00041790:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 000417a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 000417b0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 000417c0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 000417d0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 000417e0:·3a3c·2f74·683e·3c74·643e·7265·7374·7269··:</th><td>restri | |||
| 000417f0:·6374·3c2f·7464·3e3c·2f74·723e·3c2f·7461··ct</td></tr></ta | |||
| 00041800:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041 | 00041400:·3e2d·206e·616d·653a·2058·4343·4446·2056··>-·name:·XCCDF·V | ||
| 00041 | 00041410:·616c·7565·2076·6172·5f73·7973·7465·6d5f··alue·var_system_ | ||
| 00041 | 00041420:·6372·7970·746f·5f70·6f6c·6963·7920·2320··crypto_policy·#· | ||
| Max diff block lines reached; 3981402/4014438 bytes (99.18%) of diff not shown. | |||
| Offset 48, 15 lines modified | Offset 48, 15 lines modified | ||
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Health·Insurance·Portability·and·Accountability·Act |
| 49 | ··············(HIPAA) | 49 | ··············(HIPAA) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:redhat:enterprise_linux:10 | 52 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 54 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 55 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 56 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 57 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 58 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 59 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 60 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 61 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 438, 39 lines modified | Offset 438, 14 lines modified | ||
| 438 | ·············_\x8i_\x8s_\x8m······1446 | 438 | ·············_\x8i_\x8s_\x8m······1446 |
| 439 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 439 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 440 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 440 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 441 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 441 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 442 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 442 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 443 | ·············_\x8c_\x8i_\x8s······1.6.1 | 443 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 444 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 444 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 446 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 447 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 448 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 449 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 450 | --- | ||
| 451 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 452 | kind:·MachineConfig | ||
| 453 | spec: | ||
| 454 | ··config: | ||
| 455 | ····ignition: | ||
| 456 | ······version:·3.1.0 | ||
| 457 | ····systemd: | ||
| 458 | ······units: | ||
| 459 | ········-·name:·configure-crypto-policy.service | ||
| 460 | ··········enabled:·true | ||
| 461 | ··········contents:·| | ||
| 462 | ············[Unit] | ||
| 463 | ············Before=kubelet.service | ||
| 464 | ············[Service] | ||
| 465 | ············Type=oneshot | ||
| 466 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 467 | ············RemainAfterExit=yes | ||
| 468 | ············[Install] | ||
| 469 | ············WantedBy=multi-user.target | ||
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 445 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 446 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 447 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 448 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 449 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 475 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 450 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 476 | ··set_fact: | 451 | ··set_fact: |
| Offset 534, 14 lines modified | Offset 509, 39 lines modified | ||
| 534 | » echo·"to·see·what·package·to·(re)install"·>&2 | 509 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 535 | » false··#·end·with·an·error·code | 510 | » false··#·end·with·an·error·code |
| 536 | elif·test·"$rc"·!=·0;·then | 511 | elif·test·"$rc"·!=·0;·then |
| 537 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 512 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 538 | » false··#·end·with·an·error·code | 513 | » false··#·end·with·an·error·code |
| 539 | fi | 514 | fi |
| 515 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 516 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 517 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 518 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 519 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 520 | --- | ||
| 521 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 522 | kind:·MachineConfig | ||
| 523 | spec: | ||
| 524 | ··config: | ||
| 525 | ····ignition: | ||
| 526 | ······version:·3.1.0 | ||
| 527 | ····systemd: | ||
| 528 | ······units: | ||
| 529 | ········-·name:·configure-crypto-policy.service | ||
| 530 | ··········enabled:·true | ||
| 531 | ··········contents:·| | ||
| 532 | ············[Unit] | ||
| 533 | ············Before=kubelet.service | ||
| 534 | ············[Service] | ||
| 535 | ············Type=oneshot | ||
| 536 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 537 | ············RemainAfterExit=yes | ||
| 538 | ············[Install] | ||
| 539 | ············WantedBy=multi-user.target | ||
| 540 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 540 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 541 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 541 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 542 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 542 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 543 | Severity: ···medium | 543 | Severity: ···medium |
| 544 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 544 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 545 | Identifiers:·CCE-88557-4 | 545 | Identifiers:·CCE-88557-4 |
| 546 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 546 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 638, 24 lines modified | Offset 638, 24 lines modified | ||
| 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 | 638 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R71 |
| 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 | 639 | ·············_\x8c_\x8i_\x8s············1.1.2.7.1 |
| 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 640 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 641 | [[customizations.filesystem]] | 641 | [[customizations.filesystem]] |
| 642 | mountpoint·=·"/var/log/audit" | 642 | mountpoint·=·"/var/log/audit" |
| 643 | size·=·10737418240 | 643 | size·=·10737418240 |
| 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 645 | logvol·/var/log/audit·10240 | ||
| 646 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 644 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 647 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 645 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 648 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high | 646 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·high |
| 649 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 647 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 650 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 648 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 651 | part·/var/log/audit | 649 | part·/var/log/audit |
| 650 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 651 | logvol·/var/log/audit·10240 | ||
| 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules | 652 | Group ·GNOME·Desktop·Environment· Group·contains·1·group·and·3·rules |
| 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. | 653 | _\x8[_\x8r_\x8e_\x8f_\x8] ·GNOME·is·a·graphical·desktop·environment·bundled·with·many·Linux·distributions·that·allow·users·to·easily·interact·with·the·operating·system·graphically·rather·than·textually.·The·GNOME·Graphical·Display·Manager·(GDM)·provides·login,·logout,·and·user·switching·contexts·as·well·as·display·server·management. |
| 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. | 654 | GNOME·is·developed·by·the·GNOME·Project·and·is·considered·the·default·Red·Hat·Graphical·environment. |
| 655 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. | 655 | For·more·information·on·GNOME·and·the·GNOME·Project,·see·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8s\x8s_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8w\x8w_\x8w\x8w_\x8w\x8w_\x8.\x8._\x8g\x8g_\x8n\x8n_\x8o\x8o_\x8m\x8m_\x8e\x8e_\x8.\x8._\x8o\x8o_\x8r\x8r_\x8g\x8g. |
| 656 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules | 656 | Group ·GNOME·Remote·Access·Settings· Group·contains·2·rules |
| Offset 1564, 33 lines modified | Offset 1564, 25 lines modified | ||
| 1564 | Identifiers:·CCE-90212-2 | 1564 | Identifiers:·CCE-90212-2 |
| 1565 | ·············_\x8c_\x8u_\x8i····3.4.5 | 1565 | ·············_\x8c_\x8u_\x8i····3.4.5 |
| 1566 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1566 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| Max diff block lines reached; 223522/230071 bytes (97.15%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e80:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e90:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037ea0:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037eb0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037ec0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ed0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2028·6173·206f·6620·3230·323 | 00037ef0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037f00:·323 | 00037f00:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f10:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f20:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f30:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f40:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f50:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f60:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f70:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 16533, 235 lines modified | Offset 16533, 235 lines modified | ||
| 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 00040940:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | 00040950:·743d·2223·6964·6d37·3235·3022·2074·6162··t="#idm7250"·tab | ||
| 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 00040960:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 00040970:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 00040980:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 00040990:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 000409a0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 000409b0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 000409c0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 000409d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 000409e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 000409f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040a00:·643d·2269·646d·3732·3530·223e·3c74·6162··d="idm7250"><tab | |||
| 00040a10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040a20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040a30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040a40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040 | 000409c0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 000409d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000409e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000409f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00040a00:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00040a10:·3732·3530·223e·3c70·7265·3e3c·636f·6465··7250"><pre><code | |||
| 00040a20:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 00040a30:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 00040a40:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 00040a50:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 00040a60:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00040a70:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00040a80:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00040a90:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00040aa0:·6d37·3235·3122·2074·6162·696e·6465·783d··m7251"·tabindex= | |||
| 00040ab0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00040ac0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00040ad0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00040ae0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00040af0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00040b00:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 00040b10:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 00040b20:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00040b30:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00040b40:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00040b50:·6d37·3235·3122·3e3c·7461·626c·6520·636c··m7251"><table·cl | |||
| 00040b60:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00040b70:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00040b80:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00040b90:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00040ba0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00040bb0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040bc0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00040 | 00040bd0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | ||
| 00040 | 00040be0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 00040 | 00040bf0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | ||
| 00040c00:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00040c10:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00040c20:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 00040c30:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00040c40:·626c·653e·3c70·7265·3e3c·636f·6465·3e0a··ble><pre><code>. | |||
| 00040c50:·7061·636b·6167·6520·2d2d·6164·643d·6169··package·--add=ai | |||
| 00040c60:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 00040c70:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040c80:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040c90:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040ca0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040cb0:·6765·743d·2223·6964·6d37·3235·3222·2074··get="#idm7252"·t | |||
| 00040cc0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040cd0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040ce0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040cf0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040d00:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040d10:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040d20:·2073·6372·6970·7420·e287·b23c·2f61·3e3c···script·...</a>< | |||
| 00040d30:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040d40:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040d50:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040d60:·3235·3222·3e3c·7461·626c·6520·636c·6173··252"><table·clas | |||
| 00040d70:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 00040d80:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 00040d90:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 00040da0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00040db0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00040 | 00040dc0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 00040aa0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040 | 00040dd0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | ||
| 00040de0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00040 | 00040df0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00040e00:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00040e10:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00040e20:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00040e30:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 00040e40:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 00040e50:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 00040e60:·636b·6167·6520·696e·7374·616c·6c20·6169··ckage·install·ai | |||
| 00040e70:·6465·0a3c·2f63·6f64·653e·3c2f·7072·653e··de.</code></pre> | |||
| 00040e80:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00040e90:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00040ea0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00040eb0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00040ec0:·6765·743d·2223·6964·6d37·3235·3322·2074··get="#idm7253"·t | |||
| 00040ed0:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 00040ee0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 00040ef0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 00040f00:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 00040f10:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 00040f20:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 00040f30:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 00040f40:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040f50:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040f60:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040f70:·2069·643d·2269·646d·3732·3533·223e·3c74···id="idm7253"><t | |||
| Max diff block lines reached; 3704714/3737060 bytes (99.13%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Base | 46 | ··············Base |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 14 lines modified | Offset 429, 33 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [[packages]] | ||
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package·--add=aide | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 451 | package·install·aide | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 441 | -·name:·Ensure·aide·is·installed | 457 | -·name:·Ensure·aide·is·installed |
| 442 | ··package: | 458 | ··package: |
| Offset 451, 38 lines modified | Offset 470, 14 lines modified | ||
| 451 | ··-·PCI-DSSv4-11.5.2 | 470 | ··-·PCI-DSSv4-11.5.2 |
| 452 | ··-·enable_strategy | 471 | ··-·enable_strategy |
| 453 | ··-·low_complexity | 472 | ··-·low_complexity |
| 454 | ··-·low_disruption | 473 | ··-·low_disruption |
| 455 | ··-·medium_severity | 474 | ··-·medium_severity |
| 456 | ··-·no_reboot_needed | 475 | ··-·no_reboot_needed |
| 457 | ··-·package_aide_installed | 476 | ··-·package_aide_installed |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 463 | include·install_aide | ||
| 464 | class·install_aide·{ | ||
| 465 | ··package·{·'aide': | ||
| 466 | ····ensure·=>·'installed', | ||
| 467 | ··} | ||
| 468 | } | ||
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 470 | [[packages]] | ||
| 471 | name·=·"aide" | ||
| 472 | version·=·"*" | ||
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 478 | package·install·aide | ||
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 480 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 481 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 482 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 483 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 484 | #·Remediation·is·applicable·only·in·certain·platforms | 482 | #·Remediation·is·applicable·only·in·certain·platforms |
| 485 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 490, 21 lines modified | Offset 485, 26 lines modified | ||
| 490 | if·!·rpm·-q·--quiet·"aide"·;·then | 485 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 491 | ····dnf·install·-y·"aide" | 486 | ····dnf·install·-y·"aide" |
| 492 | fi | 487 | fi |
| 493 | else | 488 | else |
| 494 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 489 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 495 | fi | 490 | fi |
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 496 | include·install_aide | ||
| 501 | 497 | class·install_aide·{ | |
| 498 | ··package·{·'aide': | ||
| 499 | ····ensure·=>·'installed', | ||
| 500 | ··} | ||
| 501 | } | ||
| 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| Max diff block lines reached; 249002/255340 bytes (97.52%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037f40:·3 | 00037f40:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 16537, 235 lines modified | Offset 16537, 235 lines modified | ||
| 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 00040980:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | 00040990:·3d22·2369·646d·3732·3530·2220·7461·6269··="#idm7250"·tabi | ||
| 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 000409a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 000409b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 000409c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 000409d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 000409e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 000409f0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 000409f0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 00040a00:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00040a10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00040a | 00040a00:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 00040a10:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040a20:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040a30:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040a40:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040a50:·3235·3022·3e3c·7072·653e·3c63·6f64·653e··250"><pre><code> | |||
| 00040a60:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 00040a70:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 00040a80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00040a90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040aa0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040ab0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040ac0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040ad0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040ae0:·3732·3531·2220·7461·6269·6e64·6578·3d22··7251"·tabindex=" | |||
| 00040af0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040b00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040b10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040b20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040b30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040b40:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 00040b50:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00040b60:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00040 | 00040b70:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 00040a40:·3d22·6964·6d37·3235·3022·3e3c·7461·626c··="idm7250"><tabl | |||
| 00040a50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00040a60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00040a70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00040a80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00040 | 00040b80:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 00040b90:·3732·3531·223e·3c74·6162·6c65·2063·6c61··7251"><table·cla | |||
| 00040ba0:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040bb0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040bc0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040bd0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040be0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040bf0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040c00:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040 | 00040c10:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 00040 | 00040c20:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 00040 | 00040c30:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 00040c40:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 00040c50:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 00040c60:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 00040c70:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 00040c80:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 00040c90:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 00040ca0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00040cb0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040cc0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040cd0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040ce0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040cf0:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 00040d00:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040d10:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040d20:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040d30:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040d40:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040d50:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040d60:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 00040d70:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040d80:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040d90:·6c61·7073·6522·2069·643d·2269·646d·3732··lapse"·id="idm72 | |||
| 00040da0:·3532·223e·3c74·6162·6c65·2063·6c61·7373··52"><table·class | |||
| 00040db0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040dc0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040dd0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040de0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040df0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00040 | 00040e00:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 00040ae0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00040 | 00040e10:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 00040e20:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00040 | 00040e30:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00040e40:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00040e50:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00040e60:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00040e70:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00040e80:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00040e90:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 00040ea0:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 00040eb0:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 00040ec0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040ed0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040ee0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040ef0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040f00:·6574·3d22·2369·646d·3732·3533·2220·7461··et="#idm7253"·ta | |||
| 00040f10:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040f20:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040f30:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040f40:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040f50:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040f60:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040f70:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 00040f80:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040f90:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040fa0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040fb0:·6964·3d22·6964·6d37·3235·3322·3e3c·7461··id="idm7253"><ta | |||
| 00040fc0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00040fd0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| Max diff block lines reached; 3704645/3736991 bytes (99.13%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 47 | ··············Secret | 47 | ··············Secret |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_secret |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:10 | 50 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 60 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 430, 14 lines modified | Offset 430, 33 lines modified | ||
| 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 430 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 431 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 433 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 434 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 435 | ·············_\x8c_\x8i_\x8s············6.1.1 | 435 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 436 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | [[packages]] | ||
| 439 | name·=·"aide" | ||
| 440 | version·=·"*" | ||
| 441 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 442 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 443 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 444 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 445 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 446 | package·--add=aide | ||
| 447 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 448 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 449 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 450 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 451 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 452 | package·install·aide | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 453 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 454 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 455 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 456 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 457 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 442 | -·name:·Ensure·aide·is·installed | 458 | -·name:·Ensure·aide·is·installed |
| 443 | ··package: | 459 | ··package: |
| Offset 452, 38 lines modified | Offset 471, 14 lines modified | ||
| 452 | ··-·PCI-DSSv4-11.5.2 | 471 | ··-·PCI-DSSv4-11.5.2 |
| 453 | ··-·enable_strategy | 472 | ··-·enable_strategy |
| 454 | ··-·low_complexity | 473 | ··-·low_complexity |
| 455 | ··-·low_disruption | 474 | ··-·low_disruption |
| 456 | ··-·medium_severity | 475 | ··-·medium_severity |
| 457 | ··-·no_reboot_needed | 476 | ··-·no_reboot_needed |
| 458 | ··-·package_aide_installed | 477 | ··-·package_aide_installed |
| 459 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 460 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 461 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 462 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 463 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 464 | include·install_aide | ||
| 465 | class·install_aide·{ | ||
| 466 | ··package·{·'aide': | ||
| 467 | ····ensure·=>·'installed', | ||
| 468 | ··} | ||
| 469 | } | ||
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 471 | [[packages]] | ||
| 472 | name·=·"aide" | ||
| 473 | version·=·"*" | ||
| 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 479 | package·install·aide | ||
| 480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 479 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 480 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 481 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 482 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 485 | #·Remediation·is·applicable·only·in·certain·platforms | 483 | #·Remediation·is·applicable·only·in·certain·platforms |
| 486 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 484 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 491, 21 lines modified | Offset 486, 26 lines modified | ||
| 491 | if·!·rpm·-q·--quiet·"aide"·;·then | 486 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 492 | ····dnf·install·-y·"aide" | 487 | ····dnf·install·-y·"aide" |
| 493 | fi | 488 | fi |
| 494 | else | 489 | else |
| 495 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 490 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 496 | fi | 491 | fi |
| 497 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 492 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 498 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 493 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 499 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 494 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 500 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 495 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 501 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 496 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 497 | include·install_aide | ||
| 502 | 498 | class·install_aide·{ | |
| 499 | ··package·{·'aide': | ||
| 500 | ····ensure·=>·'installed', | ||
| 501 | ··} | ||
| 502 | } | ||
| 503 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 503 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 504 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 504 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 505 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 505 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 506 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 506 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 507 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 507 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 622, 14 lines modified | Offset 622, 18 lines modified | ||
| 622 | Identifiers:·CCE-86982-6 | 622 | Identifiers:·CCE-86982-6 |
| 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 623 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 624 | ·············_\x8i_\x8s_\x8m······1446 | 624 | ·············_\x8i_\x8s_\x8m······1446 |
| 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 625 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 626 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 627 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 628 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 629 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 630 | [customizations] | ||
| 631 | fips·=·true | ||
| Max diff block lines reached; 249002/255349 bytes (97.51%) of diff not shown. | |||
| Offset 14315, 15 lines modified | Offset 14315, 15 lines modified | ||
| 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037ea0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037eb0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037ec0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037ed0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037ee0:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037ef0:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037f00:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037f10:·3032·3 | 00037f10:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037f20:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037f30:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037f40:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037f50:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037f60:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037f70:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037f80:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16535, 235 lines modified | Offset 16535, 235 lines modified | ||
| 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 00040960:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 00040970:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00040980:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00040990:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 000409a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 000409b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 000409c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 000409d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000409e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000409f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040a00:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00040a10:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 00040a20:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 00040a30:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00040a40:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00040a50:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00040a60:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00040 | 000409d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 000409e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 000409f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00040a00:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00040a10:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00040a20:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | |||
| 00040a30:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 00040a40:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 00040a50:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 00040a60:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 00040a70:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00040a80:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00040a90:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00040aa0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00040ab0:·6574·3d22·2369·646d·3732·3531·2220·7461··et="#idm7251"·ta | |||
| 00040ac0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00040ad0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00040ae0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00040af0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00040b00:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00040b10:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00040b20:·416e·6163·6f6e·6461·2073·6e69·7070·6574··Anaconda·snippet | |||
| 00040b30:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040b40:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040b50:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040b60:·2069·643d·2269·646d·3732·3531·223e·3c74···id="idm7251"><t | |||
| 00040b70:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040b80:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040b90:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040ba0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040bb0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00040bc0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00040bd0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040be0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00040 | 00040bf0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | ||
| 00040 | 00040c00:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | ||
| 00040c10:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00040c20:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040c30:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00040c40:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00040c50:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00040c60:·3c63·6f64·653e·0a70·6163·6b61·6765·202d··<code>.package·- | |||
| 00040c70:·2d61·6464·3d61·6964·650a·3c2f·636f·6465··-add=aide.</code | |||
| 00040c80:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040c90:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040ca0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040cb0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040cc0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040cd0:·3732·3532·2220·7461·6269·6e64·6578·3d22··7252"·tabindex=" | |||
| 00040ce0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040cf0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040d00:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040d10:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040d20:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040d30:·6469·6174·696f·6e20·7363·7269·7074·20e2··diation·script·. | |||
| 00040d40:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00040d50:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00040d60:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00040d70:·643d·2269·646d·3732·3532·223e·3c74·6162··d="idm7252"><tab | |||
| 00040d80:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00040d90:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00040da0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00040db0:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00040dc0:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00040 | 00040dd0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00040de0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00040df0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00040e00:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00040e10:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00040e20:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00040 | 00040e30:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 00040e40:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00040e50:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 00040e60:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00040e70:·6f64·653e·0a70·6163·6b61·6765·2069·6e73··ode>.package·ins | |||
| 00040e80:·7461·6c6c·2061·6964·650a·3c2f·636f·6465··tall·aide.</code | |||
| 00040e90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00040ea0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00040eb0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00040ec0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00040ed0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00040ee0:·3732·3533·2220·7461·6269·6e64·6578·3d22··7253"·tabindex=" | |||
| 00040ef0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00040f00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00040f10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00040f20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00040f30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00040f40:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| 00040f50:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00040f60:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00040f70:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00040f80:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 00040f90:·3235·3322·3e3c·7461·626c·6520·636c·6173··253"><table·clas | |||
| 00040fa0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| Max diff block lines reached; 3704438/3736646 bytes (99.14%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official·- |
| 46 | ··············Top·Secret | 46 | ··············Top·Secret |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o_top_secret |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:10 | 49 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 429, 14 lines modified | Offset 429, 33 lines modified | ||
| 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 429 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 430 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 431 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 432 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 433 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 434 | ·············_\x8c_\x8i_\x8s············6.1.1 | 434 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 435 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 437 | [[packages]] | ||
| 438 | name·=·"aide" | ||
| 439 | version·=·"*" | ||
| 440 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 441 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 442 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 443 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 444 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 445 | package·--add=aide | ||
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 451 | package·install·aide | ||
| 436 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 437 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 438 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 439 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 440 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 441 | -·name:·Ensure·aide·is·installed | 457 | -·name:·Ensure·aide·is·installed |
| 442 | ··package: | 458 | ··package: |
| Offset 451, 38 lines modified | Offset 470, 14 lines modified | ||
| 451 | ··-·PCI-DSSv4-11.5.2 | 470 | ··-·PCI-DSSv4-11.5.2 |
| 452 | ··-·enable_strategy | 471 | ··-·enable_strategy |
| 453 | ··-·low_complexity | 472 | ··-·low_complexity |
| 454 | ··-·low_disruption | 473 | ··-·low_disruption |
| 455 | ··-·medium_severity | 474 | ··-·medium_severity |
| 456 | ··-·no_reboot_needed | 475 | ··-·no_reboot_needed |
| 457 | ··-·package_aide_installed | 476 | ··-·package_aide_installed |
| 458 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 459 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 460 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 461 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 462 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 463 | include·install_aide | ||
| 464 | class·install_aide·{ | ||
| 465 | ··package·{·'aide': | ||
| 466 | ····ensure·=>·'installed', | ||
| 467 | ··} | ||
| 468 | } | ||
| 469 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 470 | [[packages]] | ||
| 471 | name·=·"aide" | ||
| 472 | version·=·"*" | ||
| 473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 478 | package·install·aide | ||
| 479 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 480 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 481 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 482 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 483 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 484 | #·Remediation·is·applicable·only·in·certain·platforms | 482 | #·Remediation·is·applicable·only·in·certain·platforms |
| 485 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 490, 21 lines modified | Offset 485, 26 lines modified | ||
| 490 | if·!·rpm·-q·--quiet·"aide"·;·then | 485 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 491 | ····dnf·install·-y·"aide" | 486 | ····dnf·install·-y·"aide" |
| 492 | fi | 487 | fi |
| 493 | else | 488 | else |
| 494 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 489 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 495 | fi | 490 | fi |
| 496 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 491 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 497 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 492 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 498 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 493 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 499 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 494 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 500 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 495 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 496 | include·install_aide | ||
| 501 | 497 | class·install_aide·{ | |
| 498 | ··package·{·'aide': | ||
| 499 | ····ensure·=>·'installed', | ||
| 500 | ··} | ||
| 501 | } | ||
| 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 502 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 503 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. | 504 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·10. |
| 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 505 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 506 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 621, 14 lines modified | Offset 621, 18 lines modified | ||
| 621 | Identifiers:·CCE-86982-6 | 621 | Identifiers:·CCE-86982-6 |
| 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 622 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 623 | ·············_\x8i_\x8s_\x8m······1446 | 623 | ·············_\x8i_\x8s_\x8m······1446 |
| 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 624 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 625 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 626 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 627 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 628 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 629 | [customizations] | ||
| 630 | fips·=·true | ||
| Max diff block lines reached; 249002/255357 bytes (97.51%) of diff not shown. | |||
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037e20:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037e30:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037e40:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037e50:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037e60:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037e70:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037e80:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037e90:·6f66·2032·3032·3 | 00037e90:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037ea0:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037eb0:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037ec0:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037ed0:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037ee0:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037ef0:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f00:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 16516, 235 lines modified | Offset 16516, 235 lines modified | ||
| 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 00040830:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | 00040840:·6d37·3235·3022·2074·6162·696e·6465·783d··m7250"·tabindex= | ||
| 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 00040850:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 00040860:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 00040870:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 00040880:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 00040890:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 000408a0:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 000408b0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 000408c0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 000408d0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 000408e0:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 000408f0:·3732·3530·223e·3c74·6162·6c65·2063·6c61··7250"><table·cla | |||
| 00040900:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00040910:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00040920:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00040930:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00040940:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00040950:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00040960:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 00040970:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 00040980:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00040990:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 000409a0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 000409b0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 000409c0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 000409d0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000409e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000409f0:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 00040a00:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 00040a10:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 00040a20:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 00040a30:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 00040a40:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 00040a50:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 00040a60:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 00040a70:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 00040a80:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 00040a90:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 00040aa0:·3a0a·2020·2d20·4343·452d·3930·3437·372d··:.··-·CCE-90477- | |||
| 00040ab0:·310a·2020·2d20·434a·4953·2d35·2e31·302e··1.··-·CJIS-5.10. | |||
| 00040ac0:·312e·330a·2020·2d20·4e49·5354·2d38·3030··1.3.··-·NIST-800 | |||
| 00040ad0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 00040ae0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 00040af0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 00040b00:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 00040b10:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 00040b20:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00040b30:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00040b40:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00040b50:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00040b60:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00040b70:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 00040b80:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00040b90:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00040ba0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00040bb0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00040bc0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00040bd0:·7267·6574·3d22·2369·646d·3732·3531·2220··rget="#idm7251"· | |||
| 00040be0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00040bf0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00040c00:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00040c10:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00040c20:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00040c30:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00040c40:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 00040c50:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00040c60:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00040c70:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00040c80:·2069·643d·2269·646d·3732·3531·223e·3c74···id="idm7251"><t | |||
| 00040c90:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00040ca0:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00040cb0:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00040cc0:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00040cd0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00040ce0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 00040cf0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040d00:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00040d10:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00040d20:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 00040d30:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 00040d40:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00040d50:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 00040d60:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 00040d70:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00040d80:·3c63·6f64·653e·696e·636c·7564·6520·696e··<code>include·in | |||
| 00040d90:·7374·616c·6c5f·6169·6465·0a0a·636c·6173··stall_aide..clas | |||
| 00040da0:·7320·696e·7374·616c·6c5f·6169·6465·207b··s·install_aide·{ | |||
| 00040db0:·0a20·2070·6163·6b61·6765·207b·2027·6169··.··package·{·'ai | |||
| 00040dc0:·6465·273a·0a20·2020·2065·6e73·7572·6520··de':.····ensure· | |||
| 00040dd0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 00040de0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 00040df0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00040e00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00040e10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00040e20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00040e30:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00040e40:·3235·3222·2074·6162·696e·6465·783d·2230··252"·tabindex="0 | |||
| 00040e50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00040e60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00040e70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00040e80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00040e90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00040 | 000408a0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 00040 | 000408b0:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 00040 | 000408c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | ||
| 00040 | 000408d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | ||
| 00040 | 000408e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | ||
| 00040 | 000408f0:·6522·2069·643d·2269·646d·3732·3530·223e··e"·id="idm7250"> | ||
| 00040 | 00040900:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | ||
| 00040 | 00040910:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | ||
| Max diff block lines reached; 4185946/4218154 bytes (99.24%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise |
| 45 | ··············Linux·10 | 45 | ··············Linux·10 |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:10 | 48 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 56 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 57 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 14 lines modified | Offset 426, 33 lines modified | ||
| 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 426 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 427 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 428 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 429 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 430 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 431 | ·············_\x8c_\x8i_\x8s············6.1.1 | 431 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 432 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | [[packages]] | ||
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | package·--add=aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·install·aide | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 438 | -·name:·Ensure·aide·is·installed | 454 | -·name:·Ensure·aide·is·installed |
| 439 | ··package: | 455 | ··package: |
| Offset 448, 38 lines modified | Offset 467, 14 lines modified | ||
| 448 | ··-·PCI-DSSv4-11.5.2 | 467 | ··-·PCI-DSSv4-11.5.2 |
| 449 | ··-·enable_strategy | 468 | ··-·enable_strategy |
| 450 | ··-·low_complexity | 469 | ··-·low_complexity |
| 451 | ··-·low_disruption | 470 | ··-·low_disruption |
| 452 | ··-·medium_severity | 471 | ··-·medium_severity |
| 453 | ··-·no_reboot_needed | 472 | ··-·no_reboot_needed |
| 454 | ··-·package_aide_installed | 473 | ··-·package_aide_installed |
| 455 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 456 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 457 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 458 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 459 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 460 | include·install_aide | ||
| 461 | class·install_aide·{ | ||
| 462 | ··package·{·'aide': | ||
| 463 | ····ensure·=>·'installed', | ||
| 464 | ··} | ||
| 465 | } | ||
| 466 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 467 | [[packages]] | ||
| 468 | name·=·"aide" | ||
| 469 | version·=·"*" | ||
| 470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 475 | package·install·aide | ||
| 476 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 474 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 477 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 475 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 478 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 476 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 479 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 477 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 480 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 478 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 481 | #·Remediation·is·applicable·only·in·certain·platforms | 479 | #·Remediation·is·applicable·only·in·certain·platforms |
| 482 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 480 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 487, 21 lines modified | Offset 482, 26 lines modified | ||
| 487 | if·!·rpm·-q·--quiet·"aide"·;·then | 482 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 488 | ····dnf·install·-y·"aide" | 483 | ····dnf·install·-y·"aide" |
| 489 | fi | 484 | fi |
| 490 | else | 485 | else |
| 491 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 486 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 492 | fi | 487 | fi |
| 493 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 494 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 495 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 496 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 497 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 493 | include·install_aide | ||
| 498 | 494 | class·install_aide·{ | |
| 495 | ··package·{·'aide': | ||
| 496 | ····ensure·=>·'installed', | ||
| 497 | ··} | ||
| 498 | } | ||
| 499 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 499 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 500 | Run·the·following·command·to·generate·a·new·database: | 500 | Run·the·following·command·to·generate·a·new·database: |
| 501 | $·sudo·/usr/sbin/aide·--init | 501 | $·sudo·/usr/sbin/aide·--init |
| 502 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 502 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 503 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 503 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 504 | To·initiate·a·manual·check,·run·the·following·command: | 504 | To·initiate·a·manual·check,·run·the·following·command: |
| 505 | $·sudo·/usr/sbin/aide·--check | 505 | $·sudo·/usr/sbin/aide·--check |
| Offset 800, 39 lines modified | Offset 800, 14 lines modified | ||
| 800 | ·············_\x8i_\x8s_\x8m······1446 | 800 | ·············_\x8i_\x8s_\x8m······1446 |
| 801 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 | 801 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1,·CIP-007-3·R7.1 |
| 802 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 802 | References:··_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 803 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 803 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 804 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 804 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 805 | ·············_\x8c_\x8i_\x8s······1.6.1 | 805 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 806 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 806 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 807 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 808 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 809 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 810 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 255500/262080 bytes (97.49%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037dd0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037de0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037df0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037e00:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037e10:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037e20:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2861·7320·6f66·2032·3032·3 | 00037e40:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037e50:·3 | 00037e50:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037e60:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037e70:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037e80:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037e90:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037ea0:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037eb0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037ec0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15130, 234 lines modified | Offset 15130, 234 lines modified | ||
| 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | 0003b190:·7267·6574·3d22·2369·646d·3732·3530·2220··rget="#idm7250"· | ||
| 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003b1a0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003b1b0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003b1c0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003b1d0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003b1e0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003b1f0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b200:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003b210:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b220:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b230:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b240:·2220·6964·3d22·6964·6d37·3235·3022·3e3c··"·id="idm7250">< | |||
| 0003b250:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b260:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b270:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b280:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b290:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b2a0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b2b0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b2c0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b2d0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b2e0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b2f0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b300:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b310:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b320:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b330:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b340:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b350:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b360:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b370:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b380:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b390:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b3a0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003b3b0:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003b3c0:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003b3d0:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003b3e0:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003b3f0:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003b400:·4345·2d39·3034·3737·2d31·0a20·202d·2043··CE-90477-1.··-·C | |||
| 0003b410:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003b420:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b430:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b440:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b450:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b460:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b470:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b480:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b490:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b4a0:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b4b0:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b4c0:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4d0:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b4e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b4f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b500:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b510:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b520:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b530:·6964·6d37·3235·3122·2074·6162·696e·6465··idm7251"·tabinde | |||
| 0003b540:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b550:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b560:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b570:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b580:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b590:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b5a0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b5b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b5c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b5d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b5e0:·6d37·3235·3122·3e3c·7461·626c·6520·636c··m7251"><table·cl | |||
| 0003b5f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b600:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b610:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b620:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b630:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b640:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b650:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b660:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b670:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b680:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b690:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b6a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b6b0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b6c0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b6d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b6e0:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b6f0:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b700:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b710:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b720:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b730:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b740:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b750:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b760:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b770:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b780:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b790:·6574·3d22·2369·646d·3732·3532·2220·7461··et="#idm7252"·ta | |||
| 0003b7a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b7b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b7c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b7d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b7e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b7f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b | 0003b200:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003b | 0003b210:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | ||
| 0003b | 0003b220:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 0003b | 0003b230:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 0003b | 0003b240:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 0003b | 0003b250:·6964·6d37·3235·3022·3e3c·7072·653e·3c63··idm7250"><pre><c | ||
| 0003b | 0003b260:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | ||
| Max diff block lines reached; 7013248/7045456 bytes (99.54%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 127, 38 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 161, 26 lines modified | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | 161 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 167 | ····dnf·install·-y·"aide" | 162 | ····dnf·install·-y·"aide" |
| 168 | fi | 163 | fi |
| 169 | else | 164 | else |
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171 | fi | 166 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | ||
| 177 | 173 | class·install_aide·{ | |
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 181 | Severity: ···medium | 181 | Severity: ···medium |
| 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 183 | Identifiers:·CCE-86441-3 | 183 | Identifiers:·CCE-86441-3 |
| 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| Max diff block lines reached; 547779/554398 bytes (98.81%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·303 | 00037e50:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15130, 235 lines modified | Offset 15130, 235 lines modified | ||
| 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | 0003b190:·612d·7461·7267·6574·3d22·2369·646d·3732··a-target="#idm72 | ||
| 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | 0003b1a0:·3530·2220·7461·6269·6e64·6578·3d22·3022··50"·tabindex="0" | ||
| 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b1b0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b1c0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1d0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1e0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1f0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b200:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b210:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b220:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b230:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b240:·6170·7365·2220·6964·3d22·6964·6d37·3235··apse"·id="idm725 | |||
| 0003b250:·3022·3e3c·7461·626c·6520·636c·6173·733d··0"><table·class= | |||
| 0003b260:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b270:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b280:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b290:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b2a0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b2b0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b2c0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2d0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2e0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2f0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b300:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b310:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b320:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b330:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b340:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b350:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b360:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b370:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b380:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b390:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b3a0:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b3b0:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b3c0:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3d0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3e0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3f0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b400:·202d·2043·4345·2d39·3034·3737·2d31·0a20···-·CCE-90477-1.· | |||
| 0003b410:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b420:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b430:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b440:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b450:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b460:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b470:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b480:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b490:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b4a0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b4b0:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b4c0:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b4d0:·655f·6169·6465·5f69·6e73·7461·6c6c·6564··e_aide_installed | |||
| 0003b4e0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b4f0:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b500:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b510:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b520:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b530:·743d·2223·6964·6d37·3235·3122·2074·6162··t="#idm7251"·tab | |||
| 0003b540:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b550:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b560:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b570:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b580:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b590:·2122·3e52·656d·6564·6961·7469·6f6e·2050··!">Remediation·P | |||
| 0003b5a0:·7570·7065·7420·736e·6970·7065·7420·e287··uppet·snippet·.. | |||
| 0003b5b0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b5c0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b5d0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b5e0:·3d22·6964·6d37·3235·3122·3e3c·7461·626c··="idm7251"><tabl | |||
| 0003b5f0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b600:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b610:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b620:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b630:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b640:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b650:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b660:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b670:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b680:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b690:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b6a0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b6b0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b6c0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b6d0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b6e0:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 0003b6f0:·6c6c·5f61·6964·650a·0a63·6c61·7373·2069··ll_aide..class·i | |||
| 0003b700:·6e73·7461·6c6c·5f61·6964·6520·7b0a·2020··nstall_aide·{.·· | |||
| 0003b710:·7061·636b·6167·6520·7b20·2761·6964·6527··package·{·'aide' | |||
| 0003b720:·3a0a·2020·2020·656e·7375·7265·203d·2667··:.····ensure·=&g | |||
| 0003b730:·743b·2027·696e·7374·616c·6c65·6427·2c0a··t;·'installed',. | |||
| 0003b740:·2020·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70····}.}.</code></p | |||
| 0003b750:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b760:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b770:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b780:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b790:·7461·7267·6574·3d22·2369·646d·3732·3532··target="#idm7252 | |||
| 0003b7a0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b7b0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b7c0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b7d0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b7e0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b7f0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b | 0003b200:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b | 0003b210:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | ||
| 0003b | 0003b220:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | ||
| 0003b | 0003b230:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | ||
| 0003b | 0003b240:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | ||
| 0003b | 0003b250:·6964·3d22·6964·6d37·3235·3022·3e3c·7072··id="idm7250"><pr | ||
| 0003b | 0003b260:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | ||
| Max diff block lines reached; 6936184/6968530 bytes (99.54%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Enterprise·Linux·10 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:10 | 45 | ····*·cpe:/o:redhat:enterprise_linux:10 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 105 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 106 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 108 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 109 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 110 | ·············_\x8c_\x8i_\x8s············6.1.1 | 110 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 127, 38 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 161, 26 lines modified | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | 161 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 167 | ····dnf·install·-y·"aide" | 162 | ····dnf·install·-y·"aide" |
| 168 | fi | 163 | fi |
| 169 | else | 164 | else |
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171 | fi | 166 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | ||
| 177 | 173 | class·install_aide·{ | |
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 179 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. | 180 | Rationale:···Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward·ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g.,·audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information·system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source·audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and·records.·Audit·tools·include·custom·queries·and·report·generators.·It·is·not·uncommon·for·attackers·to·replace·the·audit·tools·or·inject·code·into·the·existing·tools·to·provide·the·capability·to·hide·or·erase·system·activity·from·the·audit·logs.·To·address·this·risk,·audit·tools·must·be·cryptographically·signed·to·provide·the·capability·to·identify·when·the·audit·tools·have·been·modified,·manipulated,·or·replaced.·An·example·is·a·checksum·hash·of·the·file·or·files. |
| 181 | Severity: ···medium | 181 | Severity: ···medium |
| 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools | 182 | Rule·ID:·····xccdf_org.ssgproject.content_rule_aide_check_audit_tools |
| 183 | Identifiers:·CCE-86441-3 | 183 | Identifiers:·CCE-86441-3 |
| 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 | 184 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001496 |
| Offset 1725, 14 lines modified | Offset 1725, 18 lines modified | ||
| 1725 | Identifiers:·CCE-86982-6 | 1725 | Identifiers:·CCE-86982-6 |
| 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1726 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1727 | ·············_\x8i_\x8s_\x8m······1446 | 1727 | ·············_\x8i_\x8s_\x8m······1446 |
| 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1728 | References:··_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1729 | ·············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1730 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1731 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1732 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1733 | [customizations] | ||
| 1734 | fips·=·true | ||
| Max diff block lines reached; 541447/548070 bytes (98.79%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038720:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038730:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038740:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038750:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038760:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038770:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038780:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038790:·7320·6f66·2032·3032·3 | 00038790:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387a0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387b0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387c0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387d0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387e0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387f0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038800:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15247, 237 lines modified | Offset 15247, 237 lines modified | ||
| 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b8e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | 0003b8f0:·2223·6964·6d37·3938·3022·2074·6162·696e··"#idm7980"·tabin | ||
| 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b900:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b910:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b920:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b930:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b940:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b950:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b950:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0003b960:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b970:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b980:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b990:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b9a0:·2269·646d·3739·3830·223e·3c74·6162·6c65··"idm7980"><table | |||
| 0003b9b0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b9c0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b9d0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b9e0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b9 | 0003b960:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0003b970:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b980:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b990:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b9a0:·6c61·7073·6522·2069·643d·2269·646d·3739··lapse"·id="idm79 | |||
| 0003b9b0:·3830·223e·3c70·7265·3e3c·636f·6465·3e0a··80"><pre><code>. | |||
| 0003b9c0:·5b5b·7061·636b·6167·6573·5d5d·0a6e·616d··[[packages]].nam | |||
| 0003b9d0:·6520·3d20·2261·6964·6522·0a76·6572·7369··e·=·"aide".versi | |||
| 0003b9e0:·6f6e·203d·2022·2a22·0a3c·2f63·6f64·653e··on·=·"*".</code> | |||
| 0003b9f0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003ba00:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003ba10:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003ba20:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003ba30:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003ba40:·3938·3122·2074·6162·696e·6465·783d·2230··981"·tabindex="0 | |||
| 0003ba50:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003ba60:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003ba70:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003ba80:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003ba90:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003baa0:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003bab0:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003bac0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003bad0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003bae0:·6c6c·6170·7365·2220·6964·3d22·6964·6d37··llapse"·id="idm7 | |||
| 0003baf0:·3938·3122·3e3c·7461·626c·6520·636c·6173··981"><table·clas | |||
| 0003bb00:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003bb10:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003bb20:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003bb30:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003bb40:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003bb50:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003bb60:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b | 0003bb70:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | ||
| 0003b | 0003bb80:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b | 0003bb90:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | ||
| 0003bba0:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003bbb0:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003bbc0:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003bbd0:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003bbe0:·653e·3c70·7265·3e3c·636f·6465·3e0a·7061··e><pre><code>.pa | |||
| 0003bbf0:·636b·6167·6520·2d2d·6164·643d·6169·6465··ckage·--add=aide | |||
| 0003bc00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bc10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bc20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bc30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bc40:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bc50:·743d·2223·6964·6d37·3938·3222·2074·6162··t="#idm7982"·tab | |||
| 0003bc60:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bc70:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bc80:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bc90:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bca0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bcb0:·2122·3e52·656d·6564·6961·7469·6f6e·2073··!">Remediation·s | |||
| 0003bcc0:·6372·6970·7420·e287·b23c·2f61·3e3c·6272··cript·...</a><br | |||
| 0003bcd0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003bce0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003bcf0:·6170·7365·2220·6964·3d22·6964·6d37·3938··apse"·id="idm798 | |||
| 0003bd00:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003bd10:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003bd20:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003bd30:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003bd40:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003bd50:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b | 0003bd60:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 0003ba40:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b | 0003bd70:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | ||
| 0003bd80:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b | 0003bd90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b | 0003bda0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 0003bdb0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003bdc0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003bdd0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003bde0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003bdf0:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003be00:·6167·6520·696e·7374·616c·6c20·6169·6465··age·install·aide | |||
| 0003ba80:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 0003ba90:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003baa0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0003bab0:·2061·6964·6520·6973·2069·6e73·7461·6c6c···aide·is·install | |||
| 0003bac0:·6564·0a20·2070·6163·6b61·6765·3a0a·2020··ed.··package:.·· | |||
| 0003bad0:·2020·6e61·6d65·3a20·6169·6465·0a20·2020····name:·aide.··· | |||
| 0003bae0:·2073·7461·7465·3a20·7072·6573·656e·740a···state:·present. | |||
| 0003baf0:·2020·7768·656e·3a20·616e·7369·626c·655f····when:·ansible_ | |||
| 0003bb00:·7669·7274·7561·6c69·7a61·7469·6f6e·5f74··virtualization_t | |||
| 0003bb10:·7970·6520·6e6f·7420·696e·205b·2264·6f63··ype·not·in·["doc | |||
| 0003bb20:·6b65·7222·2c20·226c·7863·222c·2022·6f70··ker",·"lxc",·"op | |||
| 0003bb30:·656e·767a·222c·2022·706f·646d·616e·222c··envz",·"podman", | |||
| 0003bb40:·2022·636f·6e74·6169·6e65·7222·5d0a·2020···"container"].·· | |||
| 0003bb50:·7461·6773·3a0a·2020·2d20·4343·452d·3830··tags:.··-·CCE-80 | |||
| 0003bb60:·3834·342d·340a·2020·2d20·434a·4953·2d35··844-4.··-·CJIS-5 | |||
| 0003bb70:·2e31·302e·312e·330a·2020·2d20·4449·5341··.10.1.3.··-·DISA | |||
| 0003bb80:·2d53·5449·472d·5248·454c·2d30·382d·3031··-STIG-RHEL-08-01 | |||
| 0003bb90:·3033·3539·0a20·202d·204e·4953·542d·3830··0359.··-·NIST-80 | |||
| Max diff block lines reached; 5521260/5553744 bytes (99.42%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 69 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 70 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 115, 14 lines modified | Offset 115, 33 lines modified | ||
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 116 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8c_\x8i_\x8s············5.3.1 | 119 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 120 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"aide" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·--add=aide | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·install·aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 127 | -·name:·Ensure·aide·is·installed | 143 | -·name:·Ensure·aide·is·installed |
| 128 | ··package: | 144 | ··package: |
| Offset 138, 38 lines modified | Offset 157, 14 lines modified | ||
| 138 | ··-·PCI-DSSv4-11.5.2 | 157 | ··-·PCI-DSSv4-11.5.2 |
| 139 | ··-·enable_strategy | 158 | ··-·enable_strategy |
| 140 | ··-·low_complexity | 159 | ··-·low_complexity |
| 141 | ··-·low_disruption | 160 | ··-·low_disruption |
| 142 | ··-·medium_severity | 161 | ··-·medium_severity |
| 143 | ··-·no_reboot_needed | 162 | ··-·no_reboot_needed |
| 144 | ··-·package_aide_installed | 163 | ··-·package_aide_installed |
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 150 | include·install_aide | ||
| 151 | class·install_aide·{ | ||
| 152 | ··package·{·'aide': | ||
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | [[packages]] | ||
| 158 | name·=·"aide" | ||
| 159 | version·=·"*" | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | package·install·aide | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | #·Remediation·is·applicable·only·in·certain·platforms | 169 | #·Remediation·is·applicable·only·in·certain·platforms |
| 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 170 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 177, 21 lines modified | Offset 172, 26 lines modified | ||
| 177 | if·!·rpm·-q·--quiet·"aide"·;·then | 172 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 178 | ····yum·install·-y·"aide" | 173 | ····yum·install·-y·"aide" |
| 179 | fi | 174 | fi |
| 180 | else | 175 | else |
| 181 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 182 | fi | 177 | fi |
| 183 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 184 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 185 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 186 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 187 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 183 | include·install_aide | ||
| 188 | 184 | class·install_aide·{ | |
| 185 | ··package·{·'aide': | ||
| 186 | ····ensure·=>·'installed', | ||
| 187 | ··} | ||
| 188 | } | ||
| 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 189 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 190 | Run·the·following·command·to·generate·a·new·database: | 190 | Run·the·following·command·to·generate·a·new·database: |
| 191 | $·sudo·/usr/sbin/aide·--init | 191 | $·sudo·/usr/sbin/aide·--init |
| 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 192 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 193 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 194 | To·initiate·a·manual·check,·run·the·following·command: | 194 | To·initiate·a·manual·check,·run·the·following·command: |
| 195 | $·sudo·/usr/sbin/aide·--check | 195 | $·sudo·/usr/sbin/aide·--check |
| Offset 357, 90 lines modified | Offset 357, 90 lines modified | ||
| 357 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 357 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 358 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 358 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 359 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 360 | [[customizations.filesystem]] | 360 | [[customizations.filesystem]] |
| 361 | mountpoint·=·"/home" | 361 | mountpoint·=·"/home" |
| 362 | size·=·1073741824 | 362 | size·=·1073741824 |
| 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 364 | logvol·/home·1024 | ||
| 365 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 363 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 275453/281020 bytes (98.02%) of diff not shown. | |||
| Offset 14450, 15 lines modified | Offset 14450, 15 lines modified | ||
| 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038710:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038720:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038730:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038740:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038750:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038760:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038770:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00038780:·7320·6f66·2032·3032·3 | 00038780:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00038790:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387a0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387b0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387c0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387d0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 000387e0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 000387f0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15253, 236 lines modified | Offset 15253, 236 lines modified | ||
| 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | 0003b940:·6574·3d22·2369·646d·3739·3830·2220·7461··et="#idm7980"·ta | ||
| 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0003b950:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0003b960:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0003b970:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0003b980:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0003b990:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0003b9a0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0003b9b0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b9c0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b9d0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b9e0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b9f0:·6964·3d22·6964·6d37·3938·3022·3e3c·7461··id="idm7980"><ta | |||
| 0003ba00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003ba10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003ba20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003ba30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003ba40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b | 0003b9b0:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0003b9c0:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d37·3938·3022·3e3c·7072·653e·3c63·6f64··m7980"><pre><cod | |||
| 0003ba10:·653e·0a5b·5b70·6163·6b61·6765·735d·5d0a··e>.[[packages]]. | |||
| 0003ba20:·6e61·6d65·203d·2022·6169·6465·220a·7665··name·=·"aide".ve | |||
| 0003ba30:·7273·696f·6e20·3d20·222a·220a·3c2f·636f··rsion·=·"*".</co | |||
| 0003ba40:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003ba50:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003ba60:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003ba70:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003ba80:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003ba90:·646d·3739·3831·2220·7461·6269·6e64·6578··dm7981"·tabindex | |||
| 0003baa0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003bab0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003bac0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003bad0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003bae0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003baf0:·6d65·6469·6174·696f·6e20·416e·6163·6f6e··mediation·Anacon | |||
| 0003bb00:·6461·2073·6e69·7070·6574·20e2·87b2·3c2f··da·snippet·...</ | |||
| 0003bb10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bb20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bb30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bb40:·646d·3739·3831·223e·3c74·6162·6c65·2063··dm7981"><table·c | |||
| 0003bb50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bb60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bb70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bb80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bb90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003bba0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003bbb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003bbc0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b | 0003bbd0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b | 0003bbe0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | ||
| 0003bbf0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003bc00:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003bc10:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bc20:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003bc30:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003bc40:·0a70·6163·6b61·6765·202d·2d61·6464·3d61··.package·--add=a | |||
| 0003bc50:·6964·650a·3c2f·636f·6465·3e3c·2f70·7265··ide.</code></pre | |||
| 0003bc60:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003bc70:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003bc80:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003bc90:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003bca0:·7267·6574·3d22·2369·646d·3739·3832·2220··rget="#idm7982"· | |||
| 0003bcb0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003bcc0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003bcd0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003bce0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003bcf0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bd00:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bd10:·6e20·7363·7269·7074·20e2·87b2·3c2f·613e··n·script·...</a> | |||
| 0003bd20:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bd30:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bd40:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bd50:·3739·3832·223e·3c74·6162·6c65·2063·6c61··7982"><table·cla | |||
| 0003bd60:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bd70:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bd80:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bd90:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bda0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b | 0003bdb0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003ba90:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003baa0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bab0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bac0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003bad0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003bae0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003baf0:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003bb00:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003bb10:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003bb20:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003bb30:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003bb40:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003bb50:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003bb60:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003bb70:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003bb80:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003bb90:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003bba0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003bbb0:·2d38·3038·3434·2d34·0a20·202d·2043·4a49··-80844-4.··-·CJI | |||
| 0003bbc0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003bbd0:·4953·412d·5354·4947·2d52·4845·4c2d·3038··ISA-STIG-RHEL-08 | |||
| 0003bbe0:·2d30·3130·3335·390a·2020·2d20·4e49·5354··-010359.··-·NIST | |||
| 0003bbf0:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003bc00:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003bc10:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003bc20:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003bc30:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003bc40:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003bc50:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| Max diff block lines reached; 5615829/5648175 bytes (99.43%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 145 | ··package: |
| Offset 139, 38 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 173, 26 lines modified | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | 173 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 179 | ····yum·install·-y·"aide" | 174 | ····yum·install·-y·"aide" |
| 180 | fi | 175 | fi |
| 181 | else | 176 | else |
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 183 | fi | 178 | fi |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 189 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 855, 90 lines modified | Offset 855, 90 lines modified | ||
| 855 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 855 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 856 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 856 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 857 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 857 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 858 | [[customizations.filesystem]] | 858 | [[customizations.filesystem]] |
| 859 | mountpoint·=·"/home" | 859 | mountpoint·=·"/home" |
| 860 | size·=·1073741824 | 860 | size·=·1073741824 |
| 861 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 862 | logvol·/home·1024 | ||
| 863 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 861 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 286254/291776 bytes (98.11%) of diff not shown. | |||
| Offset 14452, 15 lines modified | Offset 14452, 15 lines modified | ||
| 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038730:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038740:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038750:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038760:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038770:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00038780:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00038790:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000387a0:·7320·6f66·2032·3032·3 | 000387a0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000387b0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000387c0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000387d0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 000387e0:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 000387f0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038800:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038810:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15243, 237 lines modified | Offset 15243, 237 lines modified | ||
| 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b8a0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b8b0:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b8c0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b8d0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b8e0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b8f0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b900:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b910:·6d65·6469·6174·696f·6e20·4 | 0003b910:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b920:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b930:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b940:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b950:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b960:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003b970:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b980:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b990:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b9a0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b9 | 0003b920:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b930:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b940:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b950:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b960:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003b970:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b980:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b990:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b9a0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b9b0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b9c0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b9d0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b9e0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b9f0:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | |||
| 0003ba00:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003ba10:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003ba20:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003ba30:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003ba40:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003ba50:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003ba60:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003ba70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003ba80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003ba90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003baa0:·7073·6522·2069·643d·2269·646d·3739·3831··pse"·id="idm7981 | |||
| 0003bab0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bac0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bad0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bae0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003baf0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bb00:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bb10:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bb20:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003bb30:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003bb40:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bb50:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bb60:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bb70:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bb80:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bb90:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bba0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003bbb0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003bbc0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bbd0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bbe0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bbf0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bc00:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bc10:·2369·646d·3739·3832·2220·7461·6269·6e64··#idm7982"·tabind | |||
| 0003bc20:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bc30:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bc40:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bc50:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bc60:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bc70:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003bc80:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003bc90:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bca0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bcb0:·6522·2069·643d·2269·646d·3739·3832·223e··e"·id="idm7982"> | |||
| 0003bcc0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bcd0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bce0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bcf0:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bd00:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003bd10:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003bd20:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003ba00:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003ba10:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b | 0003bd30:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | ||
| 0003bd40:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003bd50:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b | 0003bd60:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | ||
| 0003ba40:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003ba50:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003ba60:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003ba70:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003ba80:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003ba90:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003baa0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bab0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bac0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bad0:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bae0:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003baf0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bb00:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bb10:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bb20:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bb30:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bb40:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bb50:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bb60:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bb70:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bb80:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bb90:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bba0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| Max diff block lines reached; 3164662/3197146 bytes (98.98%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 68 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 69 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 70 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 131, 14 lines modified | Offset 131, 33 lines modified | ||
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 132 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 133 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 134 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 135 | ·············_\x8c_\x8i_\x8s············5.3.1 | 135 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 136 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 137 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 139 | [[packages]] | ||
| 140 | name·=·"aide" | ||
| 141 | version·=·"*" | ||
| 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 147 | package·--add=aide | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 143 | -·name:·Ensure·aide·is·installed | 159 | -·name:·Ensure·aide·is·installed |
| 144 | ··package: | 160 | ··package: |
| Offset 154, 38 lines modified | Offset 173, 14 lines modified | ||
| 154 | ··-·PCI-DSSv4-11.5.2 | 173 | ··-·PCI-DSSv4-11.5.2 |
| 155 | ··-·enable_strategy | 174 | ··-·enable_strategy |
| 156 | ··-·low_complexity | 175 | ··-·low_complexity |
| 157 | ··-·low_disruption | 176 | ··-·low_disruption |
| 158 | ··-·medium_severity | 177 | ··-·medium_severity |
| 159 | ··-·no_reboot_needed | 178 | ··-·no_reboot_needed |
| 160 | ··-·package_aide_installed | 179 | ··-·package_aide_installed |
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | include·install_aide | ||
| 167 | class·install_aide·{ | ||
| 168 | ··package·{·'aide': | ||
| 169 | ····ensure·=>·'installed', | ||
| 170 | ··} | ||
| 171 | } | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | [[packages]] | ||
| 174 | name·=·"aide" | ||
| 175 | version·=·"*" | ||
| 176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 181 | package·install·aide | ||
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | #·Remediation·is·applicable·only·in·certain·platforms | 185 | #·Remediation·is·applicable·only·in·certain·platforms |
| 188 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 186 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 193, 21 lines modified | Offset 188, 26 lines modified | ||
| 193 | if·!·rpm·-q·--quiet·"aide"·;·then | 188 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 194 | ····yum·install·-y·"aide" | 189 | ····yum·install·-y·"aide" |
| 195 | fi | 190 | fi |
| 196 | else | 191 | else |
| 197 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 192 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 198 | fi | 193 | fi |
| 199 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 194 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 200 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 195 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 201 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 196 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 202 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 197 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 203 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 198 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 199 | include·install_aide | ||
| 204 | 200 | class·install_aide·{ | |
| 201 | ··package·{·'aide': | ||
| 202 | ····ensure·=>·'installed', | ||
| 203 | ··} | ||
| 204 | } | ||
| 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 205 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 206 | Run·the·following·command·to·generate·a·new·database: | 206 | Run·the·following·command·to·generate·a·new·database: |
| 207 | $·sudo·/usr/sbin/aide·--init | 207 | $·sudo·/usr/sbin/aide·--init |
| 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 208 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 209 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 210 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 211 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 399, 48 lines modified | Offset 399, 48 lines modified | ||
| 399 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 | 399 | ·············_\x8c_\x8i_\x8s············1.1.2.3.1 |
| 400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule | 400 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-230328r902723_rule |
| 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 402 | [[customizations.filesystem]] | 402 | [[customizations.filesystem]] |
| 403 | mountpoint·=·"/home" | 403 | mountpoint·=·"/home" |
| 404 | size·=·1073741824 | 404 | size·=·1073741824 |
| 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 406 | logvol·/home·1024 | ||
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 192094/197542 bytes (97.24%) of diff not shown. | |||
| Offset 14451, 15 lines modified | Offset 14451, 15 lines modified | ||
| 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038720:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038730:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038740:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038750:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038760:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038770:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038780:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038790:·2032·3032·3 | 00038790:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000387a0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000387b0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 000387c0:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 000387d0:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000387e0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000387f0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038800:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14901, 217 lines modified | Offset 14901, 217 lines modified | ||
| 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | 0003a340:·6765·743d·2223·6964·6d31·3333·3839·2220··get="#idm13389"· | ||
| 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003a350:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003a360:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003a370:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003a380:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003a390:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003a3a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003a3b0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003a3c0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003a3d0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003a3e0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003a3f0:·2220·6964·3d22·6964·6d31·3333·3839·223e··"·id="idm13389"> | |||
| 0003a400:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003a410:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003a420:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003a430:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003a440:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003a450:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003a460:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003a470:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003a480:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003a490:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003a | 0003a3b0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003a3c0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003a3d0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003a3e0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003a3f0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003a400:·6964·6d31·3333·3839·223e·3c70·7265·3e3c··idm13389"><pre>< | |||
| 0003a410:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003a420:·5d5d·0a6e·616d·6520·3d20·2264·6e66·2d61··]].name·=·"dnf-a | |||
| 0003a430:·7574·6f6d·6174·6963·220a·7665·7273·696f··utomatic".versio | |||
| 0003a440:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003a450:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003a460:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003a470:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003a480:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003a490:·612d·7461·7267·6574·3d22·2369·646d·3133··a-target="#idm13 | |||
| 0003a4a0:·3339·3022·2074·6162·696e·6465·783d·2230··390"·tabindex="0 | |||
| 0003a4b0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a4c0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a4d0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a4e0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a4f0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003a500:·6961·7469·6f6e·2041·6e61·636f·6e64·6120··iation·Anaconda· | |||
| 0003a510:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003a520:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003a530:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003a540:·6c6c·6170·7365·2220·6964·3d22·6964·6d31··llapse"·id="idm1 | |||
| 0003a550:·3333·3930·223e·3c74·6162·6c65·2063·6c61··3390"><table·cla | |||
| 0003a560:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003a570:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003a580:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003a590:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003a5a0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003a5b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003a5c0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003a5d0:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003a5e0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a5f0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003a600:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003a610:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003a620:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003a | 0003a630:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | ||
| 0003a640:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003a650:·6163·6b61·6765·202d·2d61·6464·3d64·6e66··ackage·--add=dnf | |||
| 0003a660:·2d61·7574·6f6d·6174·6963·0a3c·2f63·6f64··-automatic.</cod | |||
| 0003a4c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003a4d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003a4e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003a4f0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003a500:·456e·7375·7265·2064·6e66·2d61·7574·6f6d··Ensure·dnf-autom | |||
| 0003a510:·6174·6963·2069·7320·696e·7374·616c·6c65··atic·is·installe | |||
| 0003a520:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003a530:·206e·616d·653a·2064·6e66·2d61·7574·6f6d···name:·dnf-autom | |||
| 0003a540:·6174·6963·0a20·2020·2073·7461·7465·3a20··atic.····state:· | |||
| 0003a550:·7072·6573·656e·740a·2020·7461·6773·3a0a··present.··tags:. | |||
| 0003a560:·2020·2d20·4343·452d·3832·3938·352d·330a····-·CCE-82985-3. | |||
| 0003a570:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003a580:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003a590:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003a5a0:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003a5b0:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003a5c0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003a5d0:·6564·0a20·202d·2070·6163·6b61·6765·5f64··ed.··-·package_d | |||
| 0003a5e0:·6e66·2d61·7574·6f6d·6174·6963·5f69·6e73··nf-automatic_ins | |||
| 0003a5f0:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | |||
| 0003a6 | 0003a670:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | ||
| 0003a6 | 0003a680:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | ||
| 0003a6 | 0003a690:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | ||
| 0003a6 | 0003a6a0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | ||
| 0003a6 | 0003a6b0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003a6 | 0003a6c0:·6d31·3333·3931·2220·7461·6269·6e64·6578··m13391"·tabindex | ||
| 0003a6 | 0003a6d0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003a6 | 0003a6e0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003a6 | 0003a6f0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003a | 0003a700:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003a | 0003a710:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003a | 0003a720:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | ||
| 0003a730:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003a740:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003a750:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003a760:·2069·643d·2269·646d·3133·3339·3122·3e3c···id="idm13391">< | |||
| 0003a770:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003a780:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003a790:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003a7a0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003a7b0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003a7c0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003a7d0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003a7e0:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003a7f0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| Max diff block lines reached; 371584/401308 bytes (92.59%) of diff not shown. | |||
| Offset 56, 15 lines modified | Offset 56, 15 lines modified | ||
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 62 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 63 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 65 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 66 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 67 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 68 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 69 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 70 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 94, 14 lines modified | Offset 94, 33 lines modified | ||
| 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 94 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 95 | ·············suitable·for·automatic,·regular·execution. | 95 | ·············suitable·for·automatic,·regular·execution. |
| 96 | Severity: ···medium | 96 | Severity: ···medium |
| 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 97 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 98 | Identifiers:·CCE-82985-3 | 98 | Identifiers:·CCE-82985-3 |
| 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 99 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 100 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 102 | [[packages]] | ||
| 103 | name·=·"dnf-automatic" | ||
| 104 | version·=·"*" | ||
| 105 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 106 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 107 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 108 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 109 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 110 | package·--add=dnf-automatic | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 116 | package·install·dnf-automatic | ||
| 101 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 102 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 103 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 104 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 105 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 106 | -·name:·Ensure·dnf-automatic·is·installed | 122 | -·name:·Ensure·dnf-automatic·is·installed |
| 107 | ··package: | 123 | ··package: |
| Offset 111, 54 lines modified | Offset 130, 35 lines modified | ||
| 111 | ··-·CCE-82985-3 | 130 | ··-·CCE-82985-3 |
| 112 | ··-·enable_strategy | 131 | ··-·enable_strategy |
| 113 | ··-·low_complexity | 132 | ··-·low_complexity |
| 114 | ··-·low_disruption | 133 | ··-·low_disruption |
| 115 | ··-·medium_severity | 134 | ··-·medium_severity |
| 116 | ··-·no_reboot_needed | 135 | ··-·no_reboot_needed |
| 117 | ··-·package_dnf-automatic_installed | 136 | ··-·package_dnf-automatic_installed |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 123 | include·install_dnf-automatic | ||
| 124 | class·install_dnf-automatic·{ | ||
| 125 | ··package·{·'dnf-automatic': | ||
| 126 | ····ensure·=>·'installed', | ||
| 127 | ··} | ||
| 128 | } | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"dnf-automatic" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·dnf-automatic | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 144 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 142 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 145 | ····yum·install·-y·"dnf-automatic" | 143 | ····yum·install·-y·"dnf-automatic" |
| 146 | fi | 144 | fi |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 150 | include·install_dnf-automatic | ||
| 151 | class·install_dnf-automatic·{ | ||
| 152 | package· | 152 | ··package·{·'dnf-automatic': |
| 153 | ····ensure·=>·'installed', | ||
| 154 | ··} | ||
| 155 | } | ||
| 153 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 156 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 154 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 157 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 155 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 158 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 156 | automatic.conf. | 159 | automatic.conf. |
| 157 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 160 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 158 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 161 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 159 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 162 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9618, 14 lines modified | Offset 9618, 28 lines modified | ||
| 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9618 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9619 | ····························A.9.1.2 | 9619 | ····························A.9.1.2 |
| 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9620 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9621 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9622 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 | 9623 | ·············_\x8c_\x8i_\x8s············2.2.3 |
| 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9624 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9630 | package·--remove=dhcp-server | ||
| 9631 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9632 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9633 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43093/48922 bytes (88.09%) of diff not shown. | |||
| Offset 14434, 15 lines modified | Offset 14434, 15 lines modified | ||
| 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00038610:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00038620:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00038630:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00038640:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00038650:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00038660:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00038670:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00038680:·3230·323 | 00038680:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00038690:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 000386a0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 000386b0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 000386c0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 000386d0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 000386e0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 000386f0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15293, 237 lines modified | Offset 15293, 237 lines modified | ||
| 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003bbc0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003bbd0:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003bbe0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003bbf0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003bc00:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003bc10:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003bc20:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003bc30:·6564·6961·7469·6f6e·204 | 0003bc30:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003bc40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003bc50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003bc60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003bc70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003bc80:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003bc90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003bca0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003bcb0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003bcc0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003bc | 0003bc40:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003bc50:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bc60:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bc70:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bc80:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc90:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003bca0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003bcb0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003bcc0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003bcd0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003bce0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bcf0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bd00:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bd10:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bd20:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003bd30:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bd40:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bd50:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bd60:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bd70:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bd80:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003bd90:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bda0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bdb0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bdc0:·7365·2220·6964·3d22·6964·6d37·3938·3122··se"·id="idm7981" | |||
| 0003bdd0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bde0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bdf0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003be00:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003be10:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003be20:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003be30:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003be40:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003be50:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003be60:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003be70:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003be80:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003be90:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bea0:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003beb0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bec0:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003bed0:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003bee0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bef0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bf00:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bf10:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bf20:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bf30:·6964·6d37·3938·3222·2074·6162·696e·6465··idm7982"·tabinde | |||
| 0003bf40:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bf50:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bf60:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bf70:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bf80:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bf90:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bfa0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bfb0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bfc0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bfd0:·2220·6964·3d22·6964·6d37·3938·3222·3e3c··"·id="idm7982">< | |||
| 0003bfe0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bff0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003c000:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003c010:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003c020:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003 | 0003c030:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003 | 0003c040:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bd20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003bd30:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003bd40:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003bd50:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003bd60:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bd70:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bd80:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bd90:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bda0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bdb0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bdc0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bdd0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bde0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bdf0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003be00:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003be10:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003be20:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003be30:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003be40:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003be50:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003be60:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| 0003be70:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003be80:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003be90:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003bea0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003beb0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003bec0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003bed0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003bee0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| Max diff block lines reached; 7761181/7793665 bytes (99.58%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 145, 38 lines modified | Offset 164, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 166 | ··-·low_complexity |
| 148 | ··-·low_disruption | 167 | ··-·low_disruption |
| 149 | ··-·medium_severity | 168 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | 176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 21 lines modified | Offset 179, 26 lines modified | ||
| 184 | if·!·rpm·-q·--quiet·"aide"·;·then | 179 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 185 | ····yum·install·-y·"aide" | 180 | ····yum·install·-y·"aide" |
| 186 | fi | 181 | fi |
| 187 | else | 182 | else |
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 189 | fi | 184 | fi |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | include·install_aide | ||
| 195 | 191 | class·install_aide·{ | |
| 192 | ··package·{·'aide': | ||
| 193 | ····ensure·=>·'installed', | ||
| 194 | ··} | ||
| 195 | } | ||
| 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 196 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 197 | Run·the·following·command·to·generate·a·new·database: | 197 | Run·the·following·command·to·generate·a·new·database: |
| 198 | $·sudo·/usr/sbin/aide·--init | 198 | $·sudo·/usr/sbin/aide·--init |
| 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 200 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 201 | To·initiate·a·manual·check,·run·the·following·command: | 201 | To·initiate·a·manual·check,·run·the·following·command: |
| 202 | $·sudo·/usr/sbin/aide·--check | 202 | $·sudo·/usr/sbin/aide·--check |
| Offset 683, 39 lines modified | Offset 683, 14 lines modified | ||
| 683 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 683 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 684 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 684 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 685 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 685 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 686 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 686 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 687 | ·············_\x8c_\x8i_\x8s······1.6.1 | 687 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 688 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 688 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 691 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 692 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 693 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 481298/487742 bytes (98.68%) of diff not shown. | |||
| Offset 14434, 16 lines modified | Offset 14434, 16 lines modified | ||
| 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00038610:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00038620:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00038630:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00038640:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00038650:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00038660:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038670:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038680:·2020·2028·6173·206f·6620·3230·323 | 00038680:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00038690:·3 | 00038690:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 000386a0:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 000386b0:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 000386c0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 000386d0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 000386e0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 000386f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00038700:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15262, 236 lines modified | Offset 15262, 236 lines modified | ||
| 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | 0003b9d0:·7461·7267·6574·3d22·2369·646d·3739·3830··target="#idm7980 | ||
| 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b9e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b9f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003ba00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003ba10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003ba20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003ba30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003ba40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003ba50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003ba60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003ba70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba | 0003ba40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 0003ba50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003ba60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003ba70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003ba80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003ba90:·3d22·6964·6d37·3938·3022·3e3c·7072·653e··="idm7980"><pre> | |||
| 0003baa0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003bab0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003bac0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003bad0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003ba | 0003bae0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003baa0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bab0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bac0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bad0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003ba | 0003baf0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003bb00:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003bb10:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003bb20:·3d22·2369·646d·3739·3831·2220·7461·6269··="#idm7981"·tabi | |||
| 0003bb30:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003bb40:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003bb50:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003bb60:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003bb70:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003bb80:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 0003bb90:·6163·6f6e·6461·2073·6e69·7070·6574·20e2··aconda·snippet·. | |||
| 0003bba0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bbb0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bbc0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bbd0:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 0003bbe0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003bbf0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003bc00:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003bc10:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003bc20:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003bc30:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003bc40:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003bc50:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b | 0003bc60:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | ||
| 0003b | 0003bc70:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | ||
| 0003bc80:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003bc90:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003bca0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003bcb0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003bcc0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003bcd0:·6f64·653e·0a70·6163·6b61·6765·202d·2d61··ode>.package·--a | |||
| 0003bce0:·6464·3d61·6964·650a·3c2f·636f·6465·3e3c··dd=aide.</code>< | |||
| 0003bcf0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003bd00:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003bd10:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003bd20:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003bd30:·612d·7461·7267·6574·3d22·2369·646d·3739··a-target="#idm79 | |||
| 0003bd40:·3832·2220·7461·6269·6e64·6578·3d22·3022··82"·tabindex="0" | |||
| 0003bd50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003bd60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003bd70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003bd80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003bd90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003bda0:·6174·696f·6e20·7363·7269·7074·20e2·87b2··ation·script·... | |||
| 0003bdb0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bdc0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bdd0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bde0:·2269·646d·3739·3832·223e·3c74·6162·6c65··"idm7982"><table | |||
| 0003bdf0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003be00:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003be10:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003be20:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003be30:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b | 0003be40:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003be50:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003be60:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003be70:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003be80:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003be90:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b | 0003bea0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b | 0003beb0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bb40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bb50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bb60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bb70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bb80:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003bb90:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003bba0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003bbb0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003bbc0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003bbd0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003bbe0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003bbf0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003bc00:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003bc10:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003bc20:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003bc30:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003bc40:·2043·4345·2d38·3038·3434·2d34·0a20·202d···CCE-80844-4.··- | |||
| 0003bc50:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003bc60:·202d·2044·4953·412d·5354·4947·2d52·4845···-·DISA-STIG-RHE | |||
| 0003bc70:·4c2d·3038·2d30·3130·3335·390a·2020·2d20··L-08-010359.··-· | |||
| 0003bc80:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003bc90:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003bca0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| Max diff block lines reached; 4212276/4244760 bytes (99.23%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 64 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 65 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 66 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 117, 14 lines modified | Offset 117, 33 lines modified | ||
| 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 117 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 118 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 120 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 121 | ·············_\x8c_\x8i_\x8s············5.3.1 | 121 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 125 | [[packages]] | ||
| 126 | name·=·"aide" | ||
| 127 | version·=·"*" | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·--add=aide | ||
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | package·install·aide | ||
| 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 129 | -·name:·Ensure·aide·is·installed | 145 | -·name:·Ensure·aide·is·installed |
| 130 | ··package: | 146 | ··package: |
| Offset 140, 38 lines modified | Offset 159, 14 lines modified | ||
| 140 | ··-·PCI-DSSv4-11.5.2 | 159 | ··-·PCI-DSSv4-11.5.2 |
| 141 | ··-·enable_strategy | 160 | ··-·enable_strategy |
| 142 | ··-·low_complexity | 161 | ··-·low_complexity |
| 143 | ··-·low_disruption | 162 | ··-·low_disruption |
| 144 | ··-·medium_severity | 163 | ··-·medium_severity |
| 145 | ··-·no_reboot_needed | 164 | ··-·no_reboot_needed |
| 146 | ··-·package_aide_installed | 165 | ··-·package_aide_installed |
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 152 | include·install_aide | ||
| 153 | class·install_aide·{ | ||
| 154 | ··package·{·'aide': | ||
| 155 | ····ensure·=>·'installed', | ||
| 156 | ··} | ||
| 157 | } | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | [[packages]] | ||
| 160 | name·=·"aide" | ||
| 161 | version·=·"*" | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 167 | package·install·aide | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 171 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 172 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 179, 21 lines modified | Offset 174, 26 lines modified | ||
| 179 | if·!·rpm·-q·--quiet·"aide"·;·then | 174 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 180 | ····yum·install·-y·"aide" | 175 | ····yum·install·-y·"aide" |
| 181 | fi | 176 | fi |
| 182 | else | 177 | else |
| 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 178 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 184 | fi | 179 | fi |
| 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 180 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 181 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 182 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 183 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 184 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 185 | include·install_aide | ||
| 190 | 186 | class·install_aide·{ | |
| 187 | ··package·{·'aide': | ||
| 188 | ····ensure·=>·'installed', | ||
| 189 | ··} | ||
| 190 | } | ||
| 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 191 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 192 | Run·the·following·command·to·generate·a·new·database: | 192 | Run·the·following·command·to·generate·a·new·database: |
| 193 | $·sudo·/usr/sbin/aide·--init | 193 | $·sudo·/usr/sbin/aide·--init |
| 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 194 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 195 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 196 | To·initiate·a·manual·check,·run·the·following·command: | 196 | To·initiate·a·manual·check,·run·the·following·command: |
| 197 | $·sudo·/usr/sbin/aide·--check | 197 | $·sudo·/usr/sbin/aide·--check |
| Offset 678, 39 lines modified | Offset 678, 14 lines modified | ||
| 678 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 678 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 679 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 679 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 680 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 680 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 681 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 681 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 682 | ·············_\x8c_\x8i_\x8s······1.6.1 | 682 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 683 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 683 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 684 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 684 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 685 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 686 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 687 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 688 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 326637/333081 bytes (98.07%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15253, 237 lines modified | Offset 15253, 237 lines modified | ||
| 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b940:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 0003b950:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b960:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b970:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b980:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b990:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b9a0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b9b0:·6d65·6469·6174·696f·6e20·4 | 0003b9b0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b9c0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b9d0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b9e0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b9f0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003ba00:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 0003ba10:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003ba20:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003ba30:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003ba40:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b | 0003b9c0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b9d0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b9e0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b9f0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003ba00:·7365·2220·6964·3d22·6964·6d37·3938·3022··se"·id="idm7980" | |||
| 0003ba10:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003ba20:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003ba30:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003ba40:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003ba50:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003ba60:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003ba70:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003ba80:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003ba90:·7461·7267·6574·3d22·2369·646d·3739·3831··target="#idm7981 | |||
| 0003baa0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003bab0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bac0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bad0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bae0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003baf0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bb00:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 0003bb10:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bb20:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bb30:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bb40:·7073·6522·2069·643d·2269·646d·3739·3831··pse"·id="idm7981 | |||
| 0003bb50:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bb60:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bb70:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bb80:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bb90:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003bba0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003bbb0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003bbc0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b | 0003bbd0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003bbe0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003bbf0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003bc00:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003bc10:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003bc20:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003bc30:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bc40:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 0003bc50:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 0003bc60:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc70:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc80:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bc90:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bca0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bcb0:·2369·646d·3739·3832·2220·7461·6269·6e64··#idm7982"·tabind | |||
| 0003bcc0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bcd0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bce0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bcf0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bd00:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bd10:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | |||
| 0003bd20:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003bd30:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bd40:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bd50:·6522·2069·643d·2269·646d·3739·3832·223e··e"·id="idm7982"> | |||
| 0003bd60:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bd70:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bd80:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bd90:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003bda0:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b | 0003bdb0:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003b | 0003bdc0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | ||
| 0003baa0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003bab0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003bac0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003bad0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003bae0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003baf0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003bb00:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003bb10:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003bb20:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003bb30:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003bb40:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003bb50:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003bb60:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003bb70:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003bb80:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003bb90:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003bba0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003bbb0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 0003bbc0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 0003bbd0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003bbe0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 0003bbf0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003bc00:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003bc10:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003bc20:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003bc30:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003bc40:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003bc50:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003bc60:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| Max diff block lines reached; 3943440/3975924 bytes (99.18%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 116, 14 lines modified | Offset 116, 33 lines modified | ||
| 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 116 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 117 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 118 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 119 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 120 | ·············_\x8c_\x8i_\x8s············5.3.1 | 120 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 122 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 124 | [[packages]] | ||
| 125 | name·=·"aide" | ||
| 126 | version·=·"*" | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·--add=aide | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·install·aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 128 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 129 | ··package: | 145 | ··package: |
| Offset 139, 38 lines modified | Offset 158, 14 lines modified | ||
| 139 | ··-·PCI-DSSv4-11.5.2 | 158 | ··-·PCI-DSSv4-11.5.2 |
| 140 | ··-·enable_strategy | 159 | ··-·enable_strategy |
| 141 | ··-·low_complexity | 160 | ··-·low_complexity |
| 142 | ··-·low_disruption | 161 | ··-·low_disruption |
| 143 | ··-·medium_severity | 162 | ··-·medium_severity |
| 144 | ··-·no_reboot_needed | 163 | ··-·no_reboot_needed |
| 145 | ··-·package_aide_installed | 164 | ··-·package_aide_installed |
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 148 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 149 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 150 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 151 | include·install_aide | ||
| 152 | class·install_aide·{ | ||
| 153 | ··package·{·'aide': | ||
| 154 | ····ensure·=>·'installed', | ||
| 155 | ··} | ||
| 156 | } | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 158 | [[packages]] | ||
| 159 | name·=·"aide" | ||
| 160 | version·=·"*" | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 166 | package·install·aide | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 170 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 178, 21 lines modified | Offset 173, 26 lines modified | ||
| 178 | if·!·rpm·-q·--quiet·"aide"·;·then | 173 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 179 | ····yum·install·-y·"aide" | 174 | ····yum·install·-y·"aide" |
| 180 | fi | 175 | fi |
| 181 | else | 176 | else |
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 183 | fi | 178 | fi |
| 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 184 | include·install_aide | ||
| 189 | 185 | class·install_aide·{ | |
| 186 | ··package·{·'aide': | ||
| 187 | ····ensure·=>·'installed', | ||
| 188 | ··} | ||
| 189 | } | ||
| 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 190 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 191 | Run·the·following·command·to·generate·a·new·database: | 191 | Run·the·following·command·to·generate·a·new·database: |
| 192 | $·sudo·/usr/sbin/aide·--init | 192 | $·sudo·/usr/sbin/aide·--init |
| 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 193 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 194 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 195 | To·initiate·a·manual·check,·run·the·following·command: | 195 | To·initiate·a·manual·check,·run·the·following·command: |
| 196 | $·sudo·/usr/sbin/aide·--check | 196 | $·sudo·/usr/sbin/aide·--check |
| Offset 677, 39 lines modified | Offset 677, 14 lines modified | ||
| 677 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 677 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 678 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 678 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 679 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 679 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 681 | ·············_\x8c_\x8i_\x8s······1.6.1 | 681 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 682 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 682 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 683 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 683 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 684 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 685 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 686 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 687 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 300253/306697 bytes (97.90%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00038630:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00038640:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00038650:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00038660:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00038670:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00038680:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00038690:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 000386a0:·323 | 000386a0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 000386b0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 000386c0:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 000386d0:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 000386e0:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 000386f0:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00038700:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00038710:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15285, 236 lines modified | Offset 15285, 236 lines modified | ||
| 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bb40:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bb50:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bb60:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bb70:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bb80:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bb90:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bba0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bbb0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bbc0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bbd0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bbe0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bbf0:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bc00:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bc10:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bc20:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bc30:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b | 0003bbb0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003bbc0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bbd0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bbe0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bbf0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bc00:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bc10:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003bc20:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bc30:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bc40:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bc50:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bc60:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bc70:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bc80:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bc90:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bca0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bcb0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bcc0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bcd0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003bce0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003bcf0:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003bd00:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003bd10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bd20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bd30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bd40:·3d22·6964·6d37·3938·3122·3e3c·7461·626c··="idm7981"><tabl | |||
| 0003bd50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bd60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bd70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bd80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bd90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bda0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bdb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bdc0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bdd0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bde0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bdf0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003be00:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003be10:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bc60:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003be20:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003be30:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003be40:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003be50:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003be60:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003be70:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003be80:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003be90:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bea0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 0003beb0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003bec0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bed0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003bee0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003bef0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003bf00:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003bf10:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003bf20:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bf30:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bf40:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bf50:·6964·6d37·3938·3222·3e3c·7461·626c·6520··idm7982"><table· | |||
| 0003bf60:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003bf70:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003bf80:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003bf90:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003bfa0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b | 0003bfb0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003bfc0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003b | 0003bfd0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003b | 0003bfe0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b | 0003bff0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003 | 0003c000:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c010:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003bce0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003bcf0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003bd00:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003bd10:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003bd20:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003bd30:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003bd40:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003bd50:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003bd60:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003bd70:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bd80:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003bd90:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bda0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bdb0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bdc0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bdd0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bde0:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bdf0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003be00:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003be10:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003be20:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003be30:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 0003be40:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| Max diff block lines reached; 7615057/7647403 bytes (99.58%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 121, 14 lines modified | Offset 121, 33 lines modified | ||
| 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 121 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 122 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 123 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 124 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 125 | ·············_\x8c_\x8i_\x8s············5.3.1 | 125 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 129 | [[packages]] | ||
| 130 | name·=·"aide" | ||
| 131 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 137 | package·--add=aide | ||
| 138 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 139 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 140 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 141 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 142 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 143 | package·install·aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | -·name:·Ensure·aide·is·installed | 149 | -·name:·Ensure·aide·is·installed |
| 134 | ··package: | 150 | ··package: |
| Offset 144, 38 lines modified | Offset 163, 14 lines modified | ||
| 144 | ··-·PCI-DSSv4-11.5.2 | 163 | ··-·PCI-DSSv4-11.5.2 |
| 145 | ··-·enable_strategy | 164 | ··-·enable_strategy |
| 146 | ··-·low_complexity | 165 | ··-·low_complexity |
| 147 | ··-·low_disruption | 166 | ··-·low_disruption |
| 148 | ··-·medium_severity | 167 | ··-·medium_severity |
| 149 | ··-·no_reboot_needed | 168 | ··-·no_reboot_needed |
| 150 | ··-·package_aide_installed | 169 | ··-·package_aide_installed |
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | include·install_aide | ||
| 157 | class·install_aide·{ | ||
| 158 | ··package·{·'aide': | ||
| 159 | ····ensure·=>·'installed', | ||
| 160 | ··} | ||
| 161 | } | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 163 | [[packages]] | ||
| 164 | name·=·"aide" | ||
| 165 | version·=·"*" | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 171 | package·install·aide | ||
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | #·Remediation·is·applicable·only·in·certain·platforms | 175 | #·Remediation·is·applicable·only·in·certain·platforms |
| 178 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 183, 21 lines modified | Offset 178, 26 lines modified | ||
| 183 | if·!·rpm·-q·--quiet·"aide"·;·then | 178 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 184 | ····yum·install·-y·"aide" | 179 | ····yum·install·-y·"aide" |
| 185 | fi | 180 | fi |
| 186 | else | 181 | else |
| 187 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 188 | fi | 183 | fi |
| 189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 191 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 192 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 193 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 189 | include·install_aide | ||
| 194 | 190 | class·install_aide·{ | |
| 191 | ··package·{·'aide': | ||
| 192 | ····ensure·=>·'installed', | ||
| 193 | ··} | ||
| 194 | } | ||
| 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 195 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 196 | Run·the·following·command·to·generate·a·new·database: | 196 | Run·the·following·command·to·generate·a·new·database: |
| 197 | $·sudo·/usr/sbin/aide·--init | 197 | $·sudo·/usr/sbin/aide·--init |
| 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 198 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 199 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 200 | To·initiate·a·manual·check,·run·the·following·command: | 200 | To·initiate·a·manual·check,·run·the·following·command: |
| 201 | $·sudo·/usr/sbin/aide·--check | 201 | $·sudo·/usr/sbin/aide·--check |
| Offset 682, 39 lines modified | Offset 682, 14 lines modified | ||
| 682 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 682 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 683 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 683 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 684 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 684 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 686 | ·············_\x8c_\x8i_\x8s······1.6.1 | 686 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 687 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 687 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 689 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 690 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 691 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 692 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 464560/471004 bytes (98.63%) of diff not shown. | |||
| Offset 14469, 15 lines modified | Offset 14469, 15 lines modified | ||
| 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00038840:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00038850:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00038860:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00038870:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00038880:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00038890:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 000388a0:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 000388b0:·6620·3230·323 | 000388b0:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 000388c0:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 000388d0:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 000388e0:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 000388f0:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00038900:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00038910:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00038920:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 0003bb30:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 0003bb40:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003bb50:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003bb60:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003bb70:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003bb80:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003bb90:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003bba0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003bbb0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003bbc0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003bbd0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003bbe0:·7073·6522·2069·643d·2269·646d·3739·3830··pse"·id="idm7980 | |||
| 0003bbf0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003bc00:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003bc10:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003bc20:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003bc30:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b | 0003bba0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003bbb0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003bbc0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003bbd0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003bbe0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003bbf0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 0003bc00:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003bc10:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003bc20:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003bc30:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003bc40:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003bc50:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003bc60:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003bc70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003bc80:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 0003bc90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003bca0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003bcb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003bcc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003bcd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003bce0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003bcf0:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 0003bd00:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003bd10:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003bd20:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003bd30:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 0003bd40:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003bd50:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003bd60:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003bd70:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003bd80:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003bd90:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003bda0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003bdb0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b | 0003bdc0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 0003b | 0003bdd0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 0003bde0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003bdf0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003be00:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003be10:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003be20:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003be30:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 0003be40:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 0003be50:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003be60:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003be70:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003be80:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003be90:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 0003bea0:·3938·3222·2074·6162·696e·6465·783d·2230··982"·tabindex="0 | |||
| 0003beb0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003bec0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003bed0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003bee0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003bef0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003bf00:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 0003bf10:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003bf20:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003bf30:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003bf40:·3d22·6964·6d37·3938·3222·3e3c·7461·626c··="idm7982"><tabl | |||
| 0003bf50:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003bf60:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003bf70:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bf80:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003bf90:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b | 0003bfa0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b | 0003bfb0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b | 0003bfc0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0003b | 0003bfd0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b | 0003bfe0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b | 0003bff0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 0003bcd0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003bce0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003bcf0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003bd00:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003bd10:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003bd20:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003bd30:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003bd40:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003bd50:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003bd60:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003bd70:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003bd80:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003bd90:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003bda0:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 0003bdb0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003bdc0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003bdd0:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 0003bde0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003bdf0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003be00:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003be10:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003be20:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003be30:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003be40:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| Max diff block lines reached; 6069599/6101945 bytes (99.47%) of diff not shown. | |||
| Offset 61, 15 lines modified | Offset 61, 15 lines modified | ||
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 65 | ····*·cpe:/o:redhat:enterprise_linux:8 | 65 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 66 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 67 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 68 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 69 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 70 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 71 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 72 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 73 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 74 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 75 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 33 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 125 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 126 | ·············_\x8c_\x8i_\x8s············5.3.1 | 126 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | package·--add=aide | ||
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | package·install·aide | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 146 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 147 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 148 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 149 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 150 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 151 | ··package: |
| Offset 145, 38 lines modified | Offset 164, 14 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 164 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 165 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 166 | ··-·low_complexity |
| 148 | ··-·low_disruption | 167 | ··-·low_disruption |
| 149 | ··-·medium_severity | 168 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 169 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 170 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 172 | package·install·aide | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | 176 | #·Remediation·is·applicable·only·in·certain·platforms |
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 184, 21 lines modified | Offset 179, 26 lines modified | ||
| 184 | if·!·rpm·-q·--quiet·"aide"·;·then | 179 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 185 | ····yum·install·-y·"aide" | 180 | ····yum·install·-y·"aide" |
| 186 | fi | 181 | fi |
| 187 | else | 182 | else |
| 188 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 183 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 189 | fi | 184 | fi |
| 190 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 185 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 191 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 186 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 192 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 187 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 193 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 188 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 194 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 189 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 190 | include·install_aide | ||
| 195 | 191 | class·install_aide·{ | |
| 192 | ··package·{·'aide': | ||
| 193 | ····ensure·=>·'installed', | ||
| 194 | ··} | ||
| 195 | } | ||
| 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 196 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 197 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 198 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 199 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 200 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 322, 14 lines modified | Offset 322, 18 lines modified | ||
| 322 | ·············_\x8i_\x8s_\x8m······1446 | 322 | ·············_\x8i_\x8s_\x8m······1446 |
| 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 323 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 324 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 325 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 326 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 328 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 330 | [customizations] | ||
| 331 | fips·=·true | ||
| Max diff block lines reached; 514179/520406 bytes (98.80%) of diff not shown. | |||
| Offset 14436, 15 lines modified | Offset 14436, 15 lines modified | ||
| 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | 00038630:·2f68·323e·3c70·3e43·7572·7265·6e74·2076··/h2><p>Current·v | ||
| 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | 00038640:·6572·7369·6f6e·3a20·3c73·7472·6f6e·673e··ersion:·<strong> | ||
| 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | 00038650:·302e·312e·3734·3c2f·7374·726f·6e67·3e3c··0.1.74</strong>< | ||
| 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | 00038660:·2f70·3e3c·756c·3e3c·6c69·3e3c·7374·726f··/p><ul><li><stro | ||
| 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | 00038670:·6e67·3e64·7261·6674·3c2f·7374·726f·6e67··ng>draft</strong | ||
| 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | 00038680:·3e0a·2020·2020·2020·2020·2020·2020·2020··>.·············· | ||
| 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | 00038690:·2020·2020·2020·2861·7320·6f66·2032·3032········(as·of·202 | ||
| 000386a0:·3 | 000386a0:·352d·3031·2d32·3329·0a20·2020·2020·2020··5-01-23).······· | ||
| 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | 000386b0:·2020·2020·2020·2020·203c·2f6c·693e·3c2f···········</li></ | ||
| 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | 000386c0:·756c·3e3c·2f64·6976·3e3c·6832·3e54·6162··ul></div><h2>Tab | ||
| 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | 000386d0:·6c65·206f·6620·436f·6e74·656e·7473·3c2f··le·of·Contents</ | ||
| 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | 000386e0:·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872··h2><ol><li><a·hr | ||
| 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | 000386f0:·6566·3d22·2378·6363·6466·5f6f·7267·2e73··ef="#xccdf_org.s | ||
| 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | 00038700:·7367·7072·6f6a·6563·742e·636f·6e74·656e··sgproject.conten | ||
| 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | 00038710:·745f·6772·6f75·705f·7379·7374·656d·223e··t_group_system"> | ||
| Offset 17449, 245 lines modified | Offset 17449, 245 lines modified | ||
| 00044280:·6765·743d·2223·6964·6d38·3736·3322·2074··get="#idm8763"·t | 00044280:·6765·743d·2223·6964·6d38·3736·3322·2074··get="#idm8763"·t | ||
| 00044290:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | 00044290:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | ||
| 000442a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | 000442a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | ||
| 000442b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | 000442b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | ||
| 000442c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | 000442c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | ||
| 000442d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | 000442d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | ||
| 000442e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | 000442e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | ||
| 000442f0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 00044300:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00044310:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00044320:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00044330:·2069·643d·2269·646d·3837·3633·223e·3c74···id="idm8763"><t | |||
| 00044340:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00044350:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00044360:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00044370:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00044380:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 000442f0:·204b·7562·6572·6e65·7465·7320·736e·6970···Kubernetes·snip | |||
| 00044300:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00044310:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00044320:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00044330:·7365·2220·6964·3d22·6964·6d38·3736·3322··se"·id="idm8763" | |||
| 00044340:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00044350:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00044360:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00044370:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00044380:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00044390:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000443a0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000443b0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 000443 | 00044390:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 000443 | 000443a0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 000443 | 000443b0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | ||
| 000443c0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 000443d0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000443e0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 000443f0:· | 000443f0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00044400:· | 00044400:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | ||
| 00044410:· | 00044410:·7464·3e72·6573·7472·6963·743c·2f74·643e··td>restrict</td> | ||
| 00044420:· | 00044420:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | ||
| 00044430:·7072·653e·3c63·6f64·653e·2d2d·2d0a·6170··pre><code>---.ap | |||
| 00044440:·6956·6572·7369·6f6e·3a20·6d61·6368·696e··iVersion:·machin | |||
| 00044450:·6563·6f6e·6669·6775·7261·7469·6f6e·2e6f··econfiguration.o | |||
| 00044460:·7065·6e73·6869·6674·2e69·6f2f·7631·0a6b··penshift.io/v1.k | |||
| 00044470:·696e·643a·204d·6163·6869·6e65·436f·6e66··ind:·MachineConf | |||
| 00044480:·6967·0a73·7065·633a·0a20·2063·6f6e·6669··ig.spec:.··confi | |||
| 00044490:·673a·0a20·2020·2069·676e·6974·696f·6e3a··g:.····ignition: | |||
| 000444a0:·0a20·2020·2020·2076·6572·7369·6f6e·3a20··.······version:· | |||
| 000444b0:·332e·312e·300a·2020·2020·7379·7374·656d··3.1.0.····system | |||
| 000444c0:·643a·0a20·2020·2020·2075·6e69·7473·3a0a··d:.······units:. | |||
| 000444d0:·2020·2020·2020·2020·2d20·6e61·6d65·3a20··········-·name:· | |||
| 000444e0:·636f·6e66·6967·7572·652d·6372·7970·746f··configure-crypto | |||
| 000444f0:·2d70·6f6c·6963·792e·7365·7276·6963·650a··-policy.service. | |||
| 00044500:·2020·2020·2020·2020·2020·656e·6162·6c65············enable | |||
| 00044510:·643a·2074·7275·650a·2020·2020·2020·2020··d:·true.········ | |||
| 00044520:·2020·636f·6e74·656e·7473·3a20·7c0a·2020····contents:·|.·· | |||
| 00044530:·2020·2020·2020·2020·2020·5b55·6e69·745d············[Unit] | |||
| 00044540:·0a20·2020·2020·2020·2020·2020·2042·6566··.············Bef | |||
| 00044550:·6f72·653d·6b75·6265·6c65·742e·7365·7276··ore=kubelet.serv | |||
| 00044560:·6963·650a·2020·2020·2020·2020·2020·2020··ice.············ | |||
| 00044570:·5b53·6572·7669·6365·5d0a·2020·2020·2020··[Service].······ | |||
| 00044580:·2020·2020·2020·5479·7065·3d6f·6e65·7368········Type=onesh | |||
| 00044590:·6f74·0a20·2020·2020·2020·2020·2020·2045··ot.············E | |||
| 000445a0:·7865·6353·7461·7274·3d75·7064·6174·652d··xecStart=update- | |||
| 000445b0:·6372·7970·746f·2d70·6f6c·6963·6965·7320··crypto-policies· | |||
| 000445c0:·2d2d·7365·7420·7b7b·2e76·6172·5f73·7973··--set·{{.var_sys | |||
| 000445d0:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | |||
| 000445e0:·797d·7d0a·2020·2020·2020·2020·2020·2020··y}}.············ | |||
| 000445f0:·5265·6d61·696e·4166·7465·7245·7869·743d··RemainAfterExit= | |||
| 00044600:·7965·730a·2020·2020·2020·2020·2020·2020··yes.············ | |||
| 00044610:·5b49·6e73·7461·6c6c·5d0a·2020·2020·2020··[Install].······ | |||
| 00044620:·2020·2020·2020·5761·6e74·6564·4279·3d6d········WantedBy=m | |||
| 00044630:·756c·7469·2d75·7365·722e·7461·7267·6574··ulti-user.target | |||
| 00044640:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00044650:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00044660:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00044670:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00044680:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00044690:·743d·2223·6964·6d38·3736·3422·2074·6162··t="#idm8764"·tab | |||
| 000446a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 000446b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 000446c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 000446d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 000446e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 000446f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00044700:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 00044710:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00044720:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00044730:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00044740:·643d·2269·646d·3837·3634·223e·3c74·6162··d="idm8764"><tab | |||
| 00044750:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00044760:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00044770:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00044780:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00044790:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 000447a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 000447b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000447c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 000447d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 000447e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 000447f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00044800:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00044810:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 00044820:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | |||
| 00044830:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 00044 | 00044430:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | ||
| 00044 | 00044440:·5843·4344·4620·5661·6c75·6520·7661·725f··XCCDF·Value·var_ | ||
| 00044 | 00044450:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | ||
| 00044 | 00044460:·6c69·6379·2023·2070·726f·6d6f·7465·2074··licy·#·promote·t | ||
| 00044 | 00044470:·6f20·7661·7269·6162·6c65·0a20·2073·6574··o·variable.··set | ||
| 00044 | 00044480:·5f66·6163·743a·0a20·2020·2076·6172·5f73··_fact:.····var_s | ||
| Max diff block lines reached; 2883210/2916798 bytes (98.85%) of diff not shown. | |||
| Offset 52, 15 lines modified | Offset 52, 15 lines modified | ||
| 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 52 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 58 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 59 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 61 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 62 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 63 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 64 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 65 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 66 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 582, 39 lines modified | Offset 582, 14 lines modified | ||
| 582 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 582 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 583 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 583 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 584 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 584 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 585 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 585 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 586 | ·············_\x8c_\x8i_\x8s······1.6.1 | 586 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 587 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 587 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 588 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 588 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 594 | --- | ||
| 595 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 596 | kind:·MachineConfig | ||
| 597 | spec: | ||
| 598 | ··config: | ||
| 599 | ····ignition: | ||
| 600 | ······version:·3.1.0 | ||
| 601 | ····systemd: | ||
| 602 | ······units: | ||
| 603 | ········-·name:·configure-crypto-policy.service | ||
| 604 | ··········enabled:·true | ||
| 605 | ··········contents:·| | ||
| 606 | ············[Unit] | ||
| 607 | ············Before=kubelet.service | ||
| 608 | ············[Service] | ||
| 609 | ············Type=oneshot | ||
| 610 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 611 | ············RemainAfterExit=yes | ||
| 612 | ············[Install] | ||
| 613 | ············WantedBy=multi-user.target | ||
| 614 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 589 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 615 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 590 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 616 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 591 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 617 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 592 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 618 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 593 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 619 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 594 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 620 | ··set_fact: | 595 | ··set_fact: |
| Offset 680, 14 lines modified | Offset 655, 39 lines modified | ||
| 680 | » echo·"to·see·what·package·to·(re)install"·>&2 | 655 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 681 | » false··#·end·with·an·error·code | 656 | » false··#·end·with·an·error·code |
| 682 | elif·test·"$rc"·!=·0;·then | 657 | elif·test·"$rc"·!=·0;·then |
| 683 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 658 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 684 | » false··#·end·with·an·error·code | 659 | » false··#·end·with·an·error·code |
| 685 | fi | 660 | fi |
| 661 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 662 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 663 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 664 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 665 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 666 | --- | ||
| 667 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 668 | kind:·MachineConfig | ||
| 669 | spec: | ||
| 670 | ··config: | ||
| 671 | ····ignition: | ||
| 672 | ······version:·3.1.0 | ||
| 673 | ····systemd: | ||
| 674 | ······units: | ||
| 675 | ········-·name:·configure-crypto-policy.service | ||
| 676 | ··········enabled:·true | ||
| 677 | ··········contents:·| | ||
| 678 | ············[Unit] | ||
| 679 | ············Before=kubelet.service | ||
| 680 | ············[Service] | ||
| 681 | ············Type=oneshot | ||
| 682 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 683 | ············RemainAfterExit=yes | ||
| 684 | ············[Install] | ||
| 685 | ············WantedBy=multi-user.target | ||
| 686 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 686 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 687 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 687 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 688 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 688 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 689 | Severity: ···medium | 689 | Severity: ···medium |
| 690 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 690 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 691 | Identifiers:·CCE-80939-2 | 691 | Identifiers:·CCE-80939-2 |
| 692 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 692 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1038, 14 lines modified | Offset 1038, 33 lines modified | ||
| 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1038 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1039 | The·rear·package·can·be·installed·with·the·following·command: | 1039 | The·rear·package·can·be·installed·with·the·following·command: |
| 1040 | $·sudo·yum·install·rear | 1040 | $·sudo·yum·install·rear |
| 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1041 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1042 | Severity: ···medium | 1042 | Severity: ···medium |
| 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1043 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1044 | Identifiers:·CCE-82883-0 | 1044 | Identifiers:·CCE-82883-0 |
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1046 | [[packages]] | ||
| 1047 | name·=·"rear" | ||
| 1048 | version·=·"*" | ||
| 1049 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1050 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1051 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1052 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1053 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1054 | package·--add=rear | ||
| 1055 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1056 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1057 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1058 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1059 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1060 | package·install·rear | ||
| 1045 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1061 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1046 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1062 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1047 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1063 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1048 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1064 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1049 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1065 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 186507/192546 bytes (96.86%) of diff not shown. | |||
| Offset 14455, 16 lines modified | Offset 14455, 16 lines modified | ||
| 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 00038760:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038770:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038780:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038790:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 000387a0:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 000387b0:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000387c0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000387d0:·2020·2861·7320·6f66·2032·3032·3 | 000387d0:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 000387e0:·2d32·3 | 000387e0:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 000387f0:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038800:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 00038810:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 00038820:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 00038830:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 00038840:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 00038850:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 16829, 244 lines modified | Offset 16829, 244 lines modified | ||
| 00041bc0:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | 00041bc0:·612d·7461·7267·6574·3d22·2369·646d·3837··a-target="#idm87 | ||
| 00041bd0:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | 00041bd0:·3633·2220·7461·6269·6e64·6578·3d22·3022··63"·tabindex="0" | ||
| 00041be0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 00041be0:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 00041bf0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 00041bf0:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 00041c00:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 00041c00:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 00041c10:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 00041c10:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 00041c20:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 00041c20:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 00041c30:·6174·696f·6e20·4b75·6265·726e·6574·6573··ation·Kubernetes | |||
| 00041c40:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 00041c50:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 00041c60:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 00041c70:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 00041c80:·3837·3633·223e·3c74·6162·6c65·2063·6c61··8763"><table·cla | |||
| 00041c90:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 00041ca0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 00041cb0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 00041cc0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 00041cd0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 00041ce0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 00041c | 00041c30:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 00041c40:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00041c50:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00041c60:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 00041c70:·6170·7365·2220·6964·3d22·6964·6d38·3736··apse"·id="idm876 | |||
| 00041c80:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00041c90:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00041ca0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00041cb0:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00041cc0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00041cd0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00041ce0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00041cf0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00041d00:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041d10:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 00041d | 00041d20:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | ||
| 00041d10:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00041d20:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 00041d30:·6 | 00041d30:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | ||
| 00041d40:· | 00041d40:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | ||
| 00041d50:· | 00041d50:·2f74·683e·3c74·643e·7265·7374·7269·6374··/th><td>restrict | ||
| 00041d60:· | 00041d60:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | ||
| 00041d70:·6 | 00041d70:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | ||
| 00041d80:·2d2d·0a61·7069·5665·7273·696f·6e3a·206d··--.apiVersion:·m | |||
| 00041d90:·6163·6869·6e65·636f·6e66·6967·7572·6174··achineconfigurat | |||
| 00041da0:·696f·6e2e·6f70·656e·7368·6966·742e·696f··ion.openshift.io | |||
| 00041db0:·2f76·310a·6b69·6e64·3a20·4d61·6368·696e··/v1.kind:·Machin | |||
| 00041dc0:·6543·6f6e·6669·670a·7370·6563·3a0a·2020··eConfig.spec:.·· | |||
| 00041dd0:·636f·6e66·6967·3a0a·2020·2020·6967·6e69··config:.····igni | |||
| 00041de0:·7469·6f6e·3a0a·2020·2020·2020·7665·7273··tion:.······vers | |||
| 00041df0:·696f·6e3a·2033·2e31·2e30·0a20·2020·2073··ion:·3.1.0.····s | |||
| 00041e00:·7973·7465·6d64·3a0a·2020·2020·2020·756e··ystemd:.······un | |||
| 00041e10:·6974·733a·0a20·2020·2020·2020·202d·206e··its:.········-·n | |||
| 00041e20:·616d·653a·2063·6f6e·6669·6775·7265·2d63··ame:·configure-c | |||
| 00041e30:·7279·7074·6f2d·706f·6c69·6379·2e73·6572··rypto-policy.ser | |||
| 00041e40:·7669·6365·0a20·2020·2020·2020·2020·2065··vice.··········e | |||
| 00041e50:·6e61·626c·6564·3a20·7472·7565·0a20·2020··nabled:·true.··· | |||
| 00041e60:·2020·2020·2020·2063·6f6e·7465·6e74·733a·········contents: | |||
| 00041e70:·207c·0a20·2020·2020·2020·2020·2020·205b···|.············[ | |||
| 00041e80:·556e·6974·5d0a·2020·2020·2020·2020·2020··Unit].·········· | |||
| 00041e90:·2020·4265·666f·7265·3d6b·7562·656c·6574····Before=kubelet | |||
| 00041ea0:·2e73·6572·7669·6365·0a20·2020·2020·2020··.service.······· | |||
| 00041eb0:·2020·2020·205b·5365·7276·6963·655d·0a20·······[Service].· | |||
| 00041ec0:·2020·2020·2020·2020·2020·2054·7970·653d·············Type= | |||
| 00041ed0:·6f6e·6573·686f·740a·2020·2020·2020·2020··oneshot.········ | |||
| 00041ee0:·2020·2020·4578·6563·5374·6172·743d·7570······ExecStart=up | |||
| 00041ef0:·6461·7465·2d63·7279·7074·6f2d·706f·6c69··date-crypto-poli | |||
| 00041f00:·6369·6573·202d·2d73·6574·207b·7b2e·7661··cies·--set·{{.va | |||
| 00041f10:·725f·7379·7374·656d·5f63·7279·7074·6f5f··r_system_crypto_ | |||
| 00041f20:·706f·6c69·6379·7d7d·0a20·2020·2020·2020··policy}}.······· | |||
| 00041f30:·2020·2020·2052·656d·6169·6e41·6674·6572·······RemainAfter | |||
| 00041f40:·4578·6974·3d79·6573·0a20·2020·2020·2020··Exit=yes.······· | |||
| 00041f50:·2020·2020·205b·496e·7374·616c·6c5d·0a20·······[Install].· | |||
| 00041f60:·2020·2020·2020·2020·2020·2057·616e·7465·············Wante | |||
| 00041f70:·6442·793d·6d75·6c74·692d·7573·6572·2e74··dBy=multi-user.t | |||
| 00041f80:·6172·6765·740a·3c2f·636f·6465·3e3c·2f70··arget.</code></p | |||
| 00041f90:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00041fa0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00041fb0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00041fc0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00041fd0:·7461·7267·6574·3d22·2369·646d·3837·3634··target="#idm8764 | |||
| 00041fe0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00041ff0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042000:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042010:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042020:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042030:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042040:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00042050:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042060:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042070:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042080:·7365·2220·6964·3d22·6964·6d38·3736·3422··se"·id="idm8764" | |||
| 00042090:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000420a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 000420b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 000420c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 000420d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 000420e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 000420f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00042100:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042110:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00042120:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00042130:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00042140:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 00042150:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 00042160:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | |||
| 00042170:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 00042180:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0004 | 00041d80:·616d·653a·2058·4343·4446·2056·616c·7565··ame:·XCCDF·Value | ||
| 00041d90:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 00041da0:·746f·5f70·6f6c·6963·7920·2320·7072·6f6d··to_policy·#·prom | |||
| Max diff block lines reached; 3405333/3438921 bytes (99.02%) of diff not shown. | |||
| Offset 57, 15 lines modified | Offset 57, 15 lines modified | ||
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 63 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 64 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 66 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 67 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 68 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 69 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 70 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 71 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 450, 39 lines modified | Offset 450, 14 lines modified | ||
| 450 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 450 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 451 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 451 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 452 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 452 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 453 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 453 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 454 | ·············_\x8c_\x8i_\x8s······1.6.1 | 454 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 455 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 455 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 456 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 456 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 462 | --- | ||
| 463 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 464 | kind:·MachineConfig | ||
| 465 | spec: | ||
| 466 | ··config: | ||
| 467 | ····ignition: | ||
| 468 | ······version:·3.1.0 | ||
| 469 | ····systemd: | ||
| 470 | ······units: | ||
| 471 | ········-·name:·configure-crypto-policy.service | ||
| 472 | ··········enabled:·true | ||
| 473 | ··········contents:·| | ||
| 474 | ············[Unit] | ||
| 475 | ············Before=kubelet.service | ||
| 476 | ············[Service] | ||
| 477 | ············Type=oneshot | ||
| 478 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 479 | ············RemainAfterExit=yes | ||
| 480 | ············[Install] | ||
| 481 | ············WantedBy=multi-user.target | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 457 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 458 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 459 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 460 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 461 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 487 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 462 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 488 | ··set_fact: | 463 | ··set_fact: |
| Offset 548, 14 lines modified | Offset 523, 39 lines modified | ||
| 548 | » echo·"to·see·what·package·to·(re)install"·>&2 | 523 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 549 | » false··#·end·with·an·error·code | 524 | » false··#·end·with·an·error·code |
| 550 | elif·test·"$rc"·!=·0;·then | 525 | elif·test·"$rc"·!=·0;·then |
| 551 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 526 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 552 | » false··#·end·with·an·error·code | 527 | » false··#·end·with·an·error·code |
| 553 | fi | 528 | fi |
| 529 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 530 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 531 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 532 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 533 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 534 | --- | ||
| 535 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 536 | kind:·MachineConfig | ||
| 537 | spec: | ||
| 538 | ··config: | ||
| 539 | ····ignition: | ||
| 540 | ······version:·3.1.0 | ||
| 541 | ····systemd: | ||
| 542 | ······units: | ||
| 543 | ········-·name:·configure-crypto-policy.service | ||
| 544 | ··········enabled:·true | ||
| 545 | ··········contents:·| | ||
| 546 | ············[Unit] | ||
| 547 | ············Before=kubelet.service | ||
| 548 | ············[Service] | ||
| 549 | ············Type=oneshot | ||
| 550 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 551 | ············RemainAfterExit=yes | ||
| 552 | ············[Install] | ||
| 553 | ············WantedBy=multi-user.target | ||
| 554 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 554 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 555 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 555 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 556 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 556 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 557 | Severity: ···medium | 557 | Severity: ···medium |
| 558 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 558 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 559 | Identifiers:·CCE-80939-2 | 559 | Identifiers:·CCE-80939-2 |
| 560 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 560 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1553, 33 lines modified | Offset 1553, 25 lines modified | ||
| 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1553 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1554 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1555 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1556 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1557 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-08-040180 |
| 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule | 1559 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-230532r627750_rule |
| 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1561 | [customizations.services] | ||
| 1562 | masked·=·["debug-shell"] | ||
| 1563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:· | 1565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:····· | 1566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1568 | service·disable·debug-shell | ||
| 1565 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1566 | kind:·MachineConfig | ||
| 1567 | spec: | ||
| 1568 | ··config: | ||
| 1569 | ····ignition: | ||
| 1570 | ······version:·3.1.0 | ||
| 1571 | ····systemd: | ||
| 1572 | ······units: | ||
| 1573 | ······-·name:·debug-shell.service | ||
| 1574 | ········enabled:·false | ||
| 1575 | ········mask:·true | ||
| 1576 | ······-·name:·debug-shell.socket | ||
| 1577 | ········enabled:·false | ||
| Max diff block lines reached; 176125/182275 bytes (96.63%) of diff not shown. | |||
| Offset 14448, 16 lines modified | Offset 14448, 16 lines modified | ||
| 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | 000386f0:·696f·6e20·4869·7374·6f72·793c·2f68·323e··ion·History</h2> | ||
| 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | 00038700:·3c70·3e43·7572·7265·6e74·2076·6572·7369··<p>Current·versi | ||
| 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | 00038710:·6f6e·3a20·3c73·7472·6f6e·673e·302e·312e··on:·<strong>0.1. | ||
| 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | 00038720:·3734·3c2f·7374·726f·6e67·3e3c·2f70·3e3c··74</strong></p>< | ||
| 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | 00038730:·756c·3e3c·6c69·3e3c·7374·726f·6e67·3e64··ul><li><strong>d | ||
| 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | 00038740:·7261·6674·3c2f·7374·726f·6e67·3e0a·2020··raft</strong>.·· | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·2020·2861·7320·6f66·2032·3032·3 | 00038760:·2020·2861·7320·6f66·2032·3032·352d·3031····(as·of·2025-01 | ||
| 00038770:·2d32·3 | 00038770:·2d32·3329·0a20·2020·2020·2020·2020·2020··-23).··········· | ||
| 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | 00038780:·2020·2020·203c·2f6c·693e·3c2f·756c·3e3c·······</li></ul>< | ||
| 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | 00038790:·2f64·6976·3e3c·6832·3e54·6162·6c65·206f··/div><h2>Table·o | ||
| 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | 000387a0:·6620·436f·6e74·656e·7473·3c2f·6832·3e3c··f·Contents</h2>< | ||
| 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | 000387b0:·6f6c·3e3c·6c69·3e3c·6120·6872·6566·3d22··ol><li><a·href=" | ||
| 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | 000387c0:·2378·6363·6466·5f6f·7267·2e73·7367·7072··#xccdf_org.ssgpr | ||
| 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | 000387d0:·6f6a·6563·742e·636f·6e74·656e·745f·6772··oject.content_gr | ||
| 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | 000387e0:·6f75·705f·7379·7374·656d·223e·5379·7374··oup_system">Syst | ||
| Offset 17360, 236 lines modified | Offset 17360, 236 lines modified | ||
| 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | 00043cf0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | ||
| 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00043d00:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00043d10:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00043d20:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00043d30:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00043d40:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00043d50:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00043d60:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00043d70:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00043d80:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00043d90:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00043da0:·7073·6522·2069·643d·2269·646d·3739·3830··pse"·id="idm7980 | |||
| 00043db0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00043dc0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00043dd0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00043de0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00043df0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00043 | 00043d60:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 00043d70:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00043d80:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00043d90:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00043da0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00043db0:·643d·2269·646d·3739·3830·223e·3c70·7265··d="idm7980"><pre | |||
| 00043dc0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00043dd0:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 00043de0:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 00043df0:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 00043e00:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 00043e10:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 00043e20:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 00043e30:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 00043e40:·743d·2223·6964·6d37·3938·3122·2074·6162··t="#idm7981"·tab | |||
| 00043e50:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 00043e60:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 00043e70:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 00043e80:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 00043e90:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 00043ea0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 00043eb0:·6e61·636f·6e64·6120·736e·6970·7065·7420··naconda·snippet· | |||
| 00043ec0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 00043ed0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 00043ee0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 00043ef0:·6964·3d22·6964·6d37·3938·3122·3e3c·7461··id="idm7981"><ta | |||
| 00043f00:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 00043f10:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 00043f20:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 00043f30:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 00043f40:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 00043f50:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 00043f60:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00043f70:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00043 | 00043f80:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | ||
| 00043 | 00043f90:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | ||
| 00043fa0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 00043fb0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00043fc0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 00043fd0:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 00043fe0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 00043ff0:·636f·6465·3e0a·7061·636b·6167·6520·2d2d··code>.package·-- | |||
| 00044000:·6164·643d·6169·6465·0a3c·2f63·6f64·653e··add=aide.</code> | |||
| 00044010:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00044020:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00044030:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00044040:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00044050:·7461·2d74·6172·6765·743d·2223·6964·6d37··ta-target="#idm7 | |||
| 00044060:·3938·3222·2074·6162·696e·6465·783d·2230··982"·tabindex="0 | |||
| 00044070:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00044080:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00044090:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 000440a0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 000440b0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 000440c0:·6961·7469·6f6e·2073·6372·6970·7420·e287··iation·script·.. | |||
| 000440d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000440e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000440f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00044100:·3d22·6964·6d37·3938·3222·3e3c·7461·626c··="idm7982"><tabl | |||
| 00044110:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00044120:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00044130:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00044140:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00044150:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0004 | 00044160:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0004 | 00044170:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0004 | 00044180:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | ||
| 0004 | 00044190:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0004 | 000441a0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0004 | 000441b0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | ||
| 000441c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00043e90:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00043ea0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00043eb0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 00043ec0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00043ed0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00043ee0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 00043ef0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00043f00:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00043f10:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 00043f20:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 00043f30:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 00043f40:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 00043f50:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 00043f60:·2d20·4343·452d·3830·3834·342d·340a·2020··-·CCE-80844-4.·· | |||
| 00043f70:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 00043f80:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 00043f90:·454c·2d30·382d·3031·3033·3539·0a20·202d··EL-08-010359.··- | |||
| 00043fa0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 00043fb0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 00043fc0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 00043fd0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 00043fe0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| Max diff block lines reached; 3719080/3751564 bytes (99.13%) of diff not shown. | |||
| Offset 55, 15 lines modified | Offset 55, 15 lines modified | ||
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 59 | ····*·cpe:/o:redhat:enterprise_linux:8 | 59 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 60 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 61 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 62 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 63 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 64 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 65 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 66 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 69 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 585, 14 lines modified | Offset 585, 33 lines modified | ||
| 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 585 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 586 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 587 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 588 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 589 | ·············_\x8c_\x8i_\x8s············5.3.1 | 589 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 590 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 591 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 593 | [[packages]] | ||
| 594 | name·=·"aide" | ||
| 595 | version·=·"*" | ||
| 596 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 597 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 598 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 599 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 600 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 601 | package·--add=aide | ||
| 602 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 603 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 604 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 605 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 606 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 607 | package·install·aide | ||
| 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 608 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 609 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 610 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 611 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 612 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 597 | -·name:·Ensure·aide·is·installed | 613 | -·name:·Ensure·aide·is·installed |
| 598 | ··package: | 614 | ··package: |
| Offset 608, 38 lines modified | Offset 627, 14 lines modified | ||
| 608 | ··-·PCI-DSSv4-11.5.2 | 627 | ··-·PCI-DSSv4-11.5.2 |
| 609 | ··-·enable_strategy | 628 | ··-·enable_strategy |
| 610 | ··-·low_complexity | 629 | ··-·low_complexity |
| 611 | ··-·low_disruption | 630 | ··-·low_disruption |
| 612 | ··-·medium_severity | 631 | ··-·medium_severity |
| 613 | ··-·no_reboot_needed | 632 | ··-·no_reboot_needed |
| 614 | ··-·package_aide_installed | 633 | ··-·package_aide_installed |
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 620 | include·install_aide | ||
| 621 | class·install_aide·{ | ||
| 622 | ··package·{·'aide': | ||
| 623 | ····ensure·=>·'installed', | ||
| 624 | ··} | ||
| 625 | } | ||
| 626 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 627 | [[packages]] | ||
| 628 | name·=·"aide" | ||
| 629 | version·=·"*" | ||
| 630 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 631 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 632 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 633 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 634 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 635 | package·install·aide | ||
| 636 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 634 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 637 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 635 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 638 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 636 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 639 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 637 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 640 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 638 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 641 | #·Remediation·is·applicable·only·in·certain·platforms | 639 | #·Remediation·is·applicable·only·in·certain·platforms |
| 642 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 640 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 647, 21 lines modified | Offset 642, 26 lines modified | ||
| 647 | if·!·rpm·-q·--quiet·"aide"·;·then | 642 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 648 | ····yum·install·-y·"aide" | 643 | ····yum·install·-y·"aide" |
| 649 | fi | 644 | fi |
| 650 | else | 645 | else |
| 651 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 646 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 652 | fi | 647 | fi |
| 653 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 654 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 655 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 656 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 657 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 653 | include·install_aide | ||
| 658 | 654 | class·install_aide·{ | |
| 655 | ··package·{·'aide': | ||
| 656 | ····ensure·=>·'installed', | ||
| 657 | ··} | ||
| 658 | } | ||
| 659 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 659 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 660 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 661 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 661 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 662 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 662 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 663 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 663 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 683, 14 lines modified | Offset 683, 18 lines modified | ||
| 683 | ·············_\x8i_\x8s_\x8m······1446 | 683 | ·············_\x8i_\x8s_\x8m······1446 |
| 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 684 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 685 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 686 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 687 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 688 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 689 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 690 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 691 | [customizations] | ||
| 692 | fips·=·true | ||
| Max diff block lines reached; 255440/261647 bytes (97.63%) of diff not shown. | |||
| Offset 14442, 15 lines modified | Offset 14442, 15 lines modified | ||
| 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00038690:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 000386a0:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 000386b0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 000386c0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 000386d0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 000386e0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 000386f0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00038700:·6173·206f·6620·3230·323 | 00038700:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00038710:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00038720:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00038730:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00038740:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00038750:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00038760:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00038770:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15257, 237 lines modified | Offset 15257, 237 lines modified | ||
| 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b980:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | 0003b990:·6d37·3938·3022·2074·6162·696e·6465·783d··m7980"·tabindex= | ||
| 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b9a0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b9b0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b9c0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b9d0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b9e0:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b9f0:·6564·6961·7469·6f6e·204 | 0003b9f0:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003ba00:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003ba10:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003ba20:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003ba30:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003ba40:·3739·3830·223e·3c74·6162·6c65·2063·6c61··7980"><table·cla | |||
| 0003ba50:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003ba60:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003ba70:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003ba80:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003ba | 0003ba00:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003ba10:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003ba20:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003ba30:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003ba40:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003ba50:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003ba60:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003ba70:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003ba80:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003ba90:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003baa0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003bab0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003bac0:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003bad0:·6172·6765·743d·2223·6964·6d37·3938·3122··arget="#idm7981" | |||
| 0003bae0:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003baf0:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003bb00:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003bb10:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003bb20:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003bb30:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003bb40:·6f6e·2041·6e61·636f·6e64·6120·736e·6970··on·Anaconda·snip | |||
| 0003bb50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003bb60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003bb70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003bb80:·7365·2220·6964·3d22·6964·6d37·3938·3122··se"·id="idm7981" | |||
| 0003bb90:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003bba0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003bbb0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003bbc0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003bbd0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003bbe0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003bbf0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003bc00:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b | 0003bc10:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b | 0003bc20:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003bc30:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003bc40:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003bc50:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003bc60:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003bc70:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003bc80:·7265·3e3c·636f·6465·3e0a·7061·636b·6167··re><code>.packag | |||
| 0003bc90:·6520·2d2d·6164·643d·6169·6465·0a3c·2f63··e·--add=aide.</c | |||
| 0003bca0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003bcb0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003bcc0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003bcd0:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003bce0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003bcf0:·6964·6d37·3938·3222·2074·6162·696e·6465··idm7982"·tabinde | |||
| 0003bd00:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003bd10:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003bd20:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003bd30:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003bd40:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003bd50:·656d·6564·6961·7469·6f6e·2073·6372·6970··emediation·scrip | |||
| 0003bd60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bd70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bd80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bd90:·2220·6964·3d22·6964·6d37·3938·3222·3e3c··"·id="idm7982">< | |||
| 0003bda0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bdb0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bdc0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bdd0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003bde0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b | 0003bdf0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | ||
| 0003b | 0003be00:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003bae0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003baf0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b | 0003be10:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | ||
| 0003be20:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003be30:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b | 0003be40:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | ||
| 0003be50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003be60:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003be70:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003be80:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003be90:·3e3c·636f·6465·3e0a·7061·636b·6167·6520··><code>.package· | |||
| 0003bea0:·696e·7374·616c·6c20·6169·6465·0a3c·2f63··install·aide.</c | |||
| 0003bb20:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003bb30:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003bb40:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003bb50:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003bb60:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003bb70:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003bb80:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003bb90:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003bba0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003bbb0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003bbc0:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003bbd0:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003bbe0:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003bbf0:·3a0a·2020·2d20·4343·452d·3830·3834·342d··:.··-·CCE-80844- | |||
| 0003bc00:·340a·2020·2d20·434a·4953·2d35·2e31·302e··4.··-·CJIS-5.10. | |||
| 0003bc10:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003bc20:·472d·5248·454c·2d30·382d·3031·3033·3539··G-RHEL-08-010359 | |||
| Max diff block lines reached; 6070358/6102842 bytes (99.47%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 33 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8c_\x8i_\x8s············5.3.1 | 118 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 143 | ··package: |
| Offset 137, 38 lines modified | Offset 156, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 158 | ··-·low_complexity |
| 140 | ··-·low_disruption | 159 | ··-·low_disruption |
| 141 | ··-·medium_severity | 160 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 21 lines modified | Offset 171, 26 lines modified | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | 171 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 177 | ····yum·install·-y·"aide" | 172 | ····yum·install·-y·"aide" |
| 178 | fi | 173 | fi |
| 179 | else | 174 | else |
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 181 | fi | 176 | fi |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_aide | ||
| 187 | 183 | class·install_aide·{ | |
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules | 188 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·2·rules |
| 189 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 189 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 190 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. | 190 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·8. |
| 191 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 191 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 192 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·D\x8Dr\x8ra\x8ac\x8cu\x8ut\x8t·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8du\x8ul\x8le\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 314, 14 lines modified | Offset 314, 18 lines modified | ||
| 314 | ·············_\x8i_\x8s_\x8m······1446 | 314 | ·············_\x8i_\x8s_\x8m······1446 |
| 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 315 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 316 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 317 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 318 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 319 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 320 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 322 | [customizations] | ||
| 323 | fips·=·true | ||
| Max diff block lines reached; 514184/520411 bytes (98.80%) of diff not shown. | |||
| Offset 14437, 15 lines modified | Offset 14437, 15 lines modified | ||
| 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00038640:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00038650:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00038660:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00038670:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00038680:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00038690:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 000386a0:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 000386b0:·3032·3 | 000386b0:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 000386c0:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 000386d0:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 000386e0:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 000386f0:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00038700:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00038710:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00038720:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 16662, 237 lines modified | Offset 16662, 237 lines modified | ||
| 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00041150:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | 00041160:·646d·3739·3830·2220·7461·6269·6e64·6578··dm7980"·tabindex | ||
| 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 00041170:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00041180:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00041190:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000411a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000411b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 000411c0:·6d65·6469·6174·696f·6e20·4 | 000411c0:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 000411d0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 000411d0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 000411e0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 000411f0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00041200:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00041210:·6d37·3938·3022·3e3c·7461·626c·6520·636c··m7980"><table·cl | |||
| 00041220:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 00041230:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 00041240:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 00041250:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 00041260:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 00041270:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00041280:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00041290:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 000412a0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 000412b0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 000412c0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 000412d0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 000412e0:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 000412f0:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 00041300:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00041310:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 00041320:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 00041330:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 00041340:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 00041350:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 00041360:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 00041370:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00041380:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00041390:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 000413a0:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 000413b0:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 000413c0:·733a·0a20·202d·2043·4345·2d38·3038·3434··s:.··-·CCE-80844 | |||
| 000413d0:·2d34·0a20·202d·2043·4a49·532d·352e·3130··-4.··-·CJIS-5.10 | |||
| 000413e0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 000413f0:·4947·2d52·4845·4c2d·3038·2d30·3130·3335··IG-RHEL-08-01035 | |||
| 00041400:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00041410:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 00041420:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 00041430:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 00041440:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 00041450:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 00041460:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 00041470:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00041480:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00041490:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 000414a0:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 000414b0:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 000414c0:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 000414d0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 000414e0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 000414f0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00041500:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00041510:·6574·3d22·2369·646d·3739·3831·2220·7461··et="#idm7981"·ta | |||
| 00041520:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00041530:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 00041540:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 00041550:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 00041560:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 00041570:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00041580:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 00041590:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 000415a0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 000415b0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 000415c0:·643d·2269·646d·3739·3831·223e·3c74·6162··d="idm7981"><tab | |||
| 000415d0:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 000415e0:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 000415f0:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00041600:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00041610:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00041620:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 00041630:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 00041640:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 00041650:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00041660:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 00041670:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 00041680:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 00041690:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 000416a0:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 000416b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 000416c0:·6f64·653e·696e·636c·7564·6520·696e·7374··ode>include·inst | |||
| 000416d0:·616c·6c5f·6169·6465·0a0a·636c·6173·7320··all_aide..class· | |||
| 000416e0:·696e·7374·616c·6c5f·6169·6465·207b·0a20··install_aide·{.· | |||
| 000416f0:·2070·6163·6b61·6765·207b·2027·6169·6465···package·{·'aide | |||
| 00041700:·273a·0a20·2020·2065·6e73·7572·6520·3d26··':.····ensure·=& | |||
| 00041710:·6774·3b20·2769·6e73·7461·6c6c·6564·272c··gt;·'installed', | |||
| 00041720:·0a20·207d·0a7d·0a3c·2f63·6f64·653e·3c2f··.··}.}.</code></ | |||
| 00041730:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 00041740:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 00041750:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 00041760:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 00041770:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 00041780:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 00041790:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 000417a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 000417b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 000417c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 000417d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 000417e0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 000417f0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 00041800:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00041810:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00041820:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| Max diff block lines reached; 4247836/4280320 bytes (99.24%) of diff not shown. | |||
| Offset 53, 15 lines modified | Offset 53, 15 lines modified | ||
| 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 53 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 59 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 60 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 61 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 62 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 63 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 64 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 65 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 66 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 67 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 437, 14 lines modified | Offset 437, 33 lines modified | ||
| 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 437 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 438 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 439 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 440 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 441 | ·············_\x8c_\x8i_\x8s············5.3.1 | 441 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 442 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 443 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 445 | [[packages]] | ||
| 446 | name·=·"aide" | ||
| 447 | version·=·"*" | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 450 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 451 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 452 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 453 | package·--add=aide | ||
| 454 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 455 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 456 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 457 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 458 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 459 | package·install·aide | ||
| 444 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 460 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 445 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 461 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 446 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 462 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 447 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 463 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 448 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 464 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 449 | -·name:·Ensure·aide·is·installed | 465 | -·name:·Ensure·aide·is·installed |
| 450 | ··package: | 466 | ··package: |
| Offset 460, 38 lines modified | Offset 479, 14 lines modified | ||
| 460 | ··-·PCI-DSSv4-11.5.2 | 479 | ··-·PCI-DSSv4-11.5.2 |
| 461 | ··-·enable_strategy | 480 | ··-·enable_strategy |
| 462 | ··-·low_complexity | 481 | ··-·low_complexity |
| 463 | ··-·low_disruption | 482 | ··-·low_disruption |
| 464 | ··-·medium_severity | 483 | ··-·medium_severity |
| 465 | ··-·no_reboot_needed | 484 | ··-·no_reboot_needed |
| 466 | ··-·package_aide_installed | 485 | ··-·package_aide_installed |
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 469 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 470 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 471 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 472 | include·install_aide | ||
| 473 | class·install_aide·{ | ||
| 474 | ··package·{·'aide': | ||
| 475 | ····ensure·=>·'installed', | ||
| 476 | ··} | ||
| 477 | } | ||
| 478 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 479 | [[packages]] | ||
| 480 | name·=·"aide" | ||
| 481 | version·=·"*" | ||
| 482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 487 | package·install·aide | ||
| 488 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 489 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 490 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 491 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 492 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 493 | #·Remediation·is·applicable·only·in·certain·platforms | 491 | #·Remediation·is·applicable·only·in·certain·platforms |
| 494 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 492 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 499, 21 lines modified | Offset 494, 26 lines modified | ||
| 499 | if·!·rpm·-q·--quiet·"aide"·;·then | 494 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 500 | ····yum·install·-y·"aide" | 495 | ····yum·install·-y·"aide" |
| 501 | fi | 496 | fi |
| 502 | else | 497 | else |
| 503 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 498 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 504 | fi | 499 | fi |
| 505 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 500 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 506 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 501 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 507 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 502 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 508 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 503 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 509 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 504 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 505 | include·install_aide | ||
| 510 | 506 | class·install_aide·{ | |
| 507 | ··package·{·'aide': | ||
| 508 | ····ensure·=>·'installed', | ||
| 509 | ··} | ||
| 510 | } | ||
| 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 511 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 512 | Run·the·following·command·to·generate·a·new·database: | 512 | Run·the·following·command·to·generate·a·new·database: |
| 513 | $·sudo·/usr/sbin/aide·--init | 513 | $·sudo·/usr/sbin/aide·--init |
| 514 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 514 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 515 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 515 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 516 | To·initiate·a·manual·check,·run·the·following·command: | 516 | To·initiate·a·manual·check,·run·the·following·command: |
| 517 | $·sudo·/usr/sbin/aide·--check | 517 | $·sudo·/usr/sbin/aide·--check |
| Offset 820, 39 lines modified | Offset 820, 14 lines modified | ||
| 820 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) | 820 | ·············_\x8n_\x8i_\x8s_\x8t·····AC-17(a),·AC-17(2),·CM-6(a),·MA-4(6),·SC-13,·SC-12(2),·SC-12(3) |
| 821 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 821 | References:··_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 822 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 822 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 824 | ·············_\x8c_\x8i_\x8s······1.6.1 | 824 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 825 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 825 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 826 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 827 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 828 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 829 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 830 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 262070/268514 bytes (97.60%) of diff not shown. | |||
| Offset 14446, 15 lines modified | Offset 14446, 15 lines modified | ||
| 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 000386d0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 000386e0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 000386f0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038700:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038710:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038720:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038730:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038740:·206f·6620·3230·323 | 00038740:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038750:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038760:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038770:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038780:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00038790:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000387a0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000387b0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15284, 236 lines modified | Offset 15284, 236 lines modified | ||
| 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | 0003bb30:·7267·6574·3d22·2369·646d·3739·3830·2220··rget="#idm7980"· | ||
| 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | 0003bb40:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | 0003bb50:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | 0003bb60:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | 0003bb70:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | 0003bb80:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | 0003bb90:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003bba0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 0003bbb0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003bbc0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003bbd0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003bbe0:·2220·6964·3d22·6964·6d37·3938·3022·3e3c··"·id="idm7980">< | |||
| 0003bbf0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003bc00:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003bc10:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003bc20:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b | 0003bba0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | ||
| 0003bbb0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bbc0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003bbd0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bbe0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003bbf0:·6964·6d37·3938·3022·3e3c·7072·653e·3c63··idm7980"><pre><c | |||
| 0003bc00:·6f64·653e·0a5b·5b70·6163·6b61·6765·735d··ode>.[[packages] | |||
| 0003bc10:·5d0a·6e61·6d65·203d·2022·6169·6465·220a··].name·=·"aide". | |||
| 0003bc20:·7665·7273·696f·6e20·3d20·222a·220a·3c2f··version·=·"*".</ | |||
| 0003bc30:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003bc40:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003bc50:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003bc60:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003bc70:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003bc80:·2369·646d·3739·3831·2220·7461·6269·6e64··#idm7981"·tabind | |||
| 0003bc90:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003bca0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003bcb0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003bcc0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003bcd0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003bce0:·5265·6d65·6469·6174·696f·6e20·416e·6163··Remediation·Anac | |||
| 0003bcf0:·6f6e·6461·2073·6e69·7070·6574·20e2·87b2··onda·snippet·... | |||
| 0003bd00:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bd10:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bd20:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bd30:·2269·646d·3739·3831·223e·3c74·6162·6c65··"idm7981"><table | |||
| 0003bd40:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003bd50:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003bd60:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003bd70:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003bd80:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003bd90:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003bda0:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003bdb0:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003bdc0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003bdd0:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003bde0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003bdf0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0003b | 0003be00:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | ||
| 0003bc50:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b | 0003be10:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0003be20:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003be30:·653e·0a70·6163·6b61·6765·202d·2d61·6464··e>.package·--add | |||
| 0003be40:·3d61·6964·650a·3c2f·636f·6465·3e3c·2f70··=aide.</code></p | |||
| 0003be50:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003be60:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003be70:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003be80:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003be90:·7461·7267·6574·3d22·2369·646d·3739·3832··target="#idm7982 | |||
| 0003bea0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003beb0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003bec0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003bed0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003bee0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003bef0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003bf00:·696f·6e20·7363·7269·7074·20e2·87b2·3c2f··ion·script·...</ | |||
| 0003bf10:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003bf20:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003bf30:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003bf40:·646d·3739·3832·223e·3c74·6162·6c65·2063··dm7982"><table·c | |||
| 0003bf50:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003bf60:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003bf70:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003bf80:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003bf90:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b | 0003bfa0:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b | 0003bfb0:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | ||
| 0003b | 0003bfc0:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | ||
| 0003b | 0003bfd0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003bfe0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003bff0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003c000:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003c010:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003bcb0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003bcc0:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003bcd0:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003bce0:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003bcf0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003bd00:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003bd10:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003bd20:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003bd30:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003bd40:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| 0003bd50:·696f·6e5f·7479·7065·206e·6f74·2069·6e20··ion_type·not·in· | |||
| 0003bd60:·5b22·646f·636b·6572·222c·2022·6c78·6322··["docker",·"lxc" | |||
| 0003bd70:·2c20·226f·7065·6e76·7a22·2c20·2270·6f64··,·"openvz",·"pod | |||
| 0003bd80:·6d61·6e22·2c20·2263·6f6e·7461·696e·6572··man",·"container | |||
| 0003bd90:·225d·0a20·2074·6167·733a·0a20·202d·2043··"].··tags:.··-·C | |||
| 0003bda0:·4345·2d38·3038·3434·2d34·0a20·202d·2043··CE-80844-4.··-·C | |||
| 0003bdb0:·4a49·532d·352e·3130·2e31·2e33·0a20·202d··JIS-5.10.1.3.··- | |||
| 0003bdc0:·2044·4953·412d·5354·4947·2d52·4845·4c2d···DISA-STIG-RHEL- | |||
| 0003bdd0:·3038·2d30·3130·3335·390a·2020·2d20·4e49··08-010359.··-·NI | |||
| 0003bde0:·5354·2d38·3030·2d35·332d·434d·2d36·2861··ST-800-53-CM-6(a | |||
| 0003bdf0:·290a·2020·2d20·5043·492d·4453·532d·5265··).··-·PCI-DSS-Re | |||
| 0003be00:·712d·3131·2e35·0a20·202d·2050·4349·2d44··q-11.5.··-·PCI-D | |||
| Max diff block lines reached; 6441665/6474011 bytes (99.50%) of diff not shown. | |||
| Offset 54, 15 lines modified | Offset 54, 15 lines modified | ||
| 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 54 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 55 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 56 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 57 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 58 | ····*·cpe:/o:redhat:enterprise_linux:8 | 58 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 59 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 60 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 61 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 62 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 63 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 64 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 65 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 66 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 67 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 68 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 121 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 122 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 123 | ·············_\x8c_\x8i_\x8s············5.3.1 | 123 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 142, 38 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 176, 26 lines modified | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | 176 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 182 | ····yum·install·-y·"aide" | 177 | ····yum·install·-y·"aide" |
| 183 | fi | 178 | fi |
| 184 | else | 179 | else |
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 186 | fi | 181 | fi |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 192 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 197 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 198 | To·initiate·a·manual·check,·run·the·following·command: | 198 | To·initiate·a·manual·check,·run·the·following·command: |
| 199 | $·sudo·/usr/sbin/aide·--check | 199 | $·sudo·/usr/sbin/aide·--check |
| Offset 1784, 14 lines modified | Offset 1784, 18 lines modified | ||
| 1784 | ·············_\x8i_\x8s_\x8m······1446 | 1784 | ·············_\x8i_\x8s_\x8m······1446 |
| 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1785 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1786 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1787 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1788 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1789 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1790 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1791 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1792 | [customizations] | ||
| 1793 | fips·=·true | ||
| Max diff block lines reached; 478206/484025 bytes (98.80%) of diff not shown. | |||
| Offset 14470, 16 lines modified | Offset 14470, 16 lines modified | ||
| 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00038850:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00038860:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00038870:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00038880:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00038890:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 000388a0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 000388b0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 000388c0:·2028·6173·206f·6620·3230·323 | 000388c0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 000388d0:·323 | 000388d0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 000388e0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 000388f0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00038900:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00038910:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038920:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038930:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038940:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15303, 236 lines modified | Offset 15303, 236 lines modified | ||
| 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | 0003bc60:·6172·6765·743d·2223·6964·6d37·3938·3022··arget="#idm7980" | ||
| 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | 0003bc70:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | ||
| 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | 0003bc80:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | ||
| 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | 0003bc90:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | ||
| 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | 0003bca0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | ||
| 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | 0003bcb0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | ||
| 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | 0003bcc0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | ||
| 0003bcd0:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003bce0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003bcf0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003bd00:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003bd10:·6522·2069·643d·2269·646d·3739·3830·223e··e"·id="idm7980"> | |||
| 0003bd20:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003bd30:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003bd40:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003bd50:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b | 0003bcd0:·6f6e·204f·5342·7569·6c64·2042·6c75·6570··on·OSBuild·Bluep | ||
| 0003bce0:·7269·6e74·2073·6e69·7070·6574·20e2·87b2··rint·snippet·... | |||
| 0003bcf0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003bd00:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003bd10:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003bd20:·2269·646d·3739·3830·223e·3c70·7265·3e3c··"idm7980"><pre>< | |||
| 0003bd30:·636f·6465·3e0a·5b5b·7061·636b·6167·6573··code>.[[packages | |||
| 0003bd40:·5d5d·0a6e·616d·6520·3d20·2261·6964·6522··]].name·=·"aide" | |||
| 0003bd50:·0a76·6572·7369·6f6e·203d·2022·2a22·0a3c··.version·=·"*".< | |||
| 0003bd60:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003bd70:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003bd80:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003bd90:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003bda0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003bdb0:·2223·6964·6d37·3938·3122·2074·6162·696e··"#idm7981"·tabin | |||
| 0003bdc0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003bdd0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003bde0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003bdf0:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003be00:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003be10:·3e52·656d·6564·6961·7469·6f6e·2041·6e61··>Remediation·Ana | |||
| 0003be20:·636f·6e64·6120·736e·6970·7065·7420·e287··conda·snippet·.. | |||
| 0003be30:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003be40:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003be50:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003be60:·3d22·6964·6d37·3938·3122·3e3c·7461·626c··="idm7981"><tabl | |||
| 0003be70:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003be80:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003be90:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003bea0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003beb0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003bec0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003bed0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003bee0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003bef0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003bf00:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003bf10:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003bf20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b | 0003bf30:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003bd80:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b | 0003bf40:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | ||
| 0003bf50:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003bf60:·6465·3e0a·7061·636b·6167·6520·2d2d·6164··de>.package·--ad | |||
| 0003bf70:·643d·6169·6465·0a3c·2f63·6f64·653e·3c2f··d=aide.</code></ | |||
| 0003bf80:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003bf90:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003bfa0:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003bfb0:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003bfc0:·2d74·6172·6765·743d·2223·6964·6d37·3938··-target="#idm798 | |||
| 0003bfd0:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | |||
| 0003bfe0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003bff0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003c000:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003c010:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003c020:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003c030:·7469·6f6e·2073·6372·6970·7420·e287·b23c··tion·script·...< | |||
| 0003c040:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003c050:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003c060:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003c070:·6964·6d37·3938·3222·3e3c·7461·626c·6520··idm7982"><table· | |||
| 0003c080:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003c090:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003c0a0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003c0b0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003c0c0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003 | 0003c0d0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003 | 0003c0e0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 0003 | 0003c0f0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 0003 | 0003c100:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003 | 0003c110:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003 | 0003c120:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 0003c130:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003be00:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003be10:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003be20:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003be30:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003be40:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003be50:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003be60:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003be70:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003be80:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003be90:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003bea0:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003beb0:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003bec0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003bed0:·4343·452d·3830·3834·342d·340a·2020·2d20··CCE-80844-4.··-· | |||
| 0003bee0:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003bef0:·2d20·4449·5341·2d53·5449·472d·5248·454c··-·DISA-STIG-RHEL | |||
| 0003bf00:·2d30·382d·3031·3033·3539·0a20·202d·204e··-08-010359.··-·N | |||
| 0003bf10:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003bf20:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| 0003bf30:·6571·2d31·312e·350a·2020·2d20·5043·492d··eq-11.5.··-·PCI- | |||
| 0003bf40:·4453·5376·342d·3131·2e35·2e32·0a20·202d··DSSv4-11.5.2.··- | |||
| 0003bf50:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| Max diff block lines reached; 6342286/6374770 bytes (99.49%) of diff not shown. | |||
| Offset 60, 15 lines modified | Offset 60, 15 lines modified | ||
| 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 | 60 | ····*·cpe:/o:redhat:enterprise_linux:8.6 |
| 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 | 61 | ····*·cpe:/o:redhat:enterprise_linux:8.7 |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 | 62 | ····*·cpe:/o:redhat:enterprise_linux:8.8 |
| 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 | 63 | ····*·cpe:/o:redhat:enterprise_linux:8.9 |
| 64 | ····*·cpe:/o:redhat:enterprise_linux:8 | 64 | ····*·cpe:/o:redhat:enterprise_linux:8 |
| 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 65 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 66 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 67 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 68 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 69 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 70 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 71 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 72 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 73 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 74 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 124, 14 lines modified | Offset 124, 33 lines modified | ||
| 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 124 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 125 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 | 126 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-08-010359 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8c_\x8i_\x8s············5.3.1 | 128 | ·············_\x8c_\x8i_\x8s············5.3.1 |
| 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 129 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-251710r880730_rule |
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 132 | [[packages]] | ||
| 133 | name·=·"aide" | ||
| 134 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | package·--add=aide | ||
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | package·install·aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 148 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 149 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 150 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 151 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 136 | -·name:·Ensure·aide·is·installed | 152 | -·name:·Ensure·aide·is·installed |
| 137 | ··package: | 153 | ··package: |
| Offset 147, 38 lines modified | Offset 166, 14 lines modified | ||
| 147 | ··-·PCI-DSSv4-11.5.2 | 166 | ··-·PCI-DSSv4-11.5.2 |
| 148 | ··-·enable_strategy | 167 | ··-·enable_strategy |
| 149 | ··-·low_complexity | 168 | ··-·low_complexity |
| 150 | ··-·low_disruption | 169 | ··-·low_disruption |
| 151 | ··-·medium_severity | 170 | ··-·medium_severity |
| 152 | ··-·no_reboot_needed | 171 | ··-·no_reboot_needed |
| 153 | ··-·package_aide_installed | 172 | ··-·package_aide_installed |
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | include·install_aide | ||
| 160 | class·install_aide·{ | ||
| 161 | ··package·{·'aide': | ||
| 162 | ····ensure·=>·'installed', | ||
| 163 | ··} | ||
| 164 | } | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 166 | [[packages]] | ||
| 167 | name·=·"aide" | ||
| 168 | version·=·"*" | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | package·install·aide | ||
| 175 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 176 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 177 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 178 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 179 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 180 | #·Remediation·is·applicable·only·in·certain·platforms | 178 | #·Remediation·is·applicable·only·in·certain·platforms |
| 181 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 186, 21 lines modified | Offset 181, 26 lines modified | ||
| 186 | if·!·rpm·-q·--quiet·"aide"·;·then | 181 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 187 | ····yum·install·-y·"aide" | 182 | ····yum·install·-y·"aide" |
| 188 | fi | 183 | fi |
| 189 | else | 184 | else |
| 190 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 191 | fi | 186 | fi |
| 192 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 193 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 194 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 195 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 196 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 192 | include·install_aide | ||
| 197 | 193 | class·install_aide·{ | |
| 194 | ··package·{·'aide': | ||
| 195 | ····ensure·=>·'installed', | ||
| 196 | ··} | ||
| 197 | } | ||
| 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 198 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 199 | Run·the·following·command·to·generate·a·new·database: | 199 | Run·the·following·command·to·generate·a·new·database: |
| 200 | $·sudo·/usr/sbin/aide·--init | 200 | $·sudo·/usr/sbin/aide·--init |
| 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 201 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 202 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 203 | To·initiate·a·manual·check,·run·the·following·command: | 203 | To·initiate·a·manual·check,·run·the·following·command: |
| 204 | $·sudo·/usr/sbin/aide·--check | 204 | $·sudo·/usr/sbin/aide·--check |
| Offset 1789, 14 lines modified | Offset 1789, 18 lines modified | ||
| 1789 | ·············_\x8i_\x8s_\x8m······1446 | 1789 | ·············_\x8i_\x8s_\x8m······1446 |
| 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1790 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1791 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1792 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1793 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 | 1794 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-08-010020 |
| 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule | 1795 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-230223r928585_rule |
| 1796 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1797 | [customizations] | ||
| 1798 | fips·=·true | ||
| Max diff block lines reached; 469809/475628 bytes (98.78%) of diff not shown. | |||
| Offset 14316, 16 lines modified | Offset 14316, 16 lines modified | ||
| 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037eb0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ec0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ed0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ee0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ef0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f00:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f10:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f20:·2861·7320·6f66·2032·3032·3 | 00037f20:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037f30:·3 | 00037f30:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f40:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f50:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f60:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f70:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f80:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f90:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fa0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15108, 237 lines modified | Offset 15108, 237 lines modified | ||
| 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b030:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b040:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b050:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b060:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b070:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b080:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b090:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b0a0:·656d·6564·6961·7469·6f6e·204 | 0003b0a0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b0b0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | |||
| 0003b0b0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b0c0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b0d0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b0e0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b0f0:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b100:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b110:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b120:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b130:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b140:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b150:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b160:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b170:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b180:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b190:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b1a0:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b1b0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b1c0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b1d0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b1e0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b1f0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b200:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b210:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b220:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b230:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b240:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b250:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b260:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b270:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b280:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b290:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b2a0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b2b0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b2c0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b2d0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b2e0:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b2f0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b300:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b310:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b320:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b330:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b340:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b350:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b360:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b370:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b380:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b390:·6167·655f·6169·6465·5f69·6e73·7461·6c6c··age_aide_install | |||
| 0003b3a0:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 0003b3b0:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b3c0:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b3d0:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b3e0:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b3f0:·6765·743d·2223·6964·6d38·3430·3722·2074··get="#idm8407"·t | |||
| 0003b400:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b410:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b420:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b430:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b440:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b450:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b460:·2050·7570·7065·7420·736e·6970·7065·7420···Puppet·snippet· | |||
| 0003b470:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b480:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b490:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4a0:·6964·3d22·6964·6d38·3430·3722·3e3c·7461··id="idm8407"><ta | |||
| 0003b4b0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4c0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4d0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b4e0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b4f0:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b500:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b510:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b520:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b530:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b540:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b550:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b560:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b570:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b580:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b590:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b5a0:·636f·6465·3e69·6e63·6c75·6465·2069·6e73··code>include·ins | |||
| 0003b5b0:·7461·6c6c·5f61·6964·650a·0a63·6c61·7373··tall_aide..class | |||
| 0003b5c0:·2069·6e73·7461·6c6c·5f61·6964·6520·7b0a···install_aide·{. | |||
| 0003b5d0:·2020·7061·636b·6167·6520·7b20·2761·6964····package·{·'aid | |||
| 0003b5e0:·6527·3a0a·2020·2020·656e·7375·7265·203d··e':.····ensure·= | |||
| 0003b5f0:·2667·743b·2027·696e·7374·616c·6c65·6427··>·'installed' | |||
| 0003b600:·2c0a·2020·7d0a·7d0a·3c2f·636f·6465·3e3c··,.··}.}.</code>< | |||
| 0003b610:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b620:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b630:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b640:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b650:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b660:·3038·2220·7461·6269·6e64·6578·3d22·3022··08"·tabindex="0" | |||
| 0003b670:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b680:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b690:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b6a0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b6b0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b6c0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b6d0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b6e0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b6f0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| Max diff block lines reached; 5550171/5582793 bytes (99.42%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 103, 14 lines modified | Offset 103, 33 lines modified | ||
| 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 103 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 104 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 105 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 106 | ·············_\x8c_\x8i_\x8s············6.1.1 | 106 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 107 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 111 | [[packages]] | ||
| 112 | name·=·"aide" | ||
| 113 | version·=·"*" | ||
| 114 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 115 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 116 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 117 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 118 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 119 | package·--add=aide | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·install·aide | ||
| 110 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 111 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 112 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 113 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 114 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 115 | -·name:·Ensure·aide·is·installed | 131 | -·name:·Ensure·aide·is·installed |
| 116 | ··package: | 132 | ··package: |
| Offset 126, 38 lines modified | Offset 145, 14 lines modified | ||
| 126 | ··-·PCI-DSSv4-11.5.2 | 145 | ··-·PCI-DSSv4-11.5.2 |
| 127 | ··-·enable_strategy | 146 | ··-·enable_strategy |
| 128 | ··-·low_complexity | 147 | ··-·low_complexity |
| 129 | ··-·low_disruption | 148 | ··-·low_disruption |
| 130 | ··-·medium_severity | 149 | ··-·medium_severity |
| 131 | ··-·no_reboot_needed | 150 | ··-·no_reboot_needed |
| 132 | ··-·package_aide_installed | 151 | ··-·package_aide_installed |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 138 | include·install_aide | ||
| 139 | class·install_aide·{ | ||
| 140 | ··package·{·'aide': | ||
| 141 | ····ensure·=>·'installed', | ||
| 142 | ··} | ||
| 143 | } | ||
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | [[packages]] | ||
| 146 | name·=·"aide" | ||
| 147 | version·=·"*" | ||
| 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 153 | package·install·aide | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 159 | #·Remediation·is·applicable·only·in·certain·platforms | 157 | #·Remediation·is·applicable·only·in·certain·platforms |
| 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 158 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 165, 21 lines modified | Offset 160, 26 lines modified | ||
| 165 | if·!·rpm·-q·--quiet·"aide"·;·then | 160 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 166 | ····dnf·install·-y·"aide" | 161 | ····dnf·install·-y·"aide" |
| 167 | fi | 162 | fi |
| 168 | else | 163 | else |
| 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 164 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 170 | fi | 165 | fi |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 167 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 168 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 169 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 170 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 171 | include·install_aide | ||
| 176 | 172 | class·install_aide·{ | |
| 173 | ··package·{·'aide': | ||
| 174 | ····ensure·=>·'installed', | ||
| 175 | ··} | ||
| 176 | } | ||
| 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 177 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 178 | Run·the·following·command·to·generate·a·new·database: | 178 | Run·the·following·command·to·generate·a·new·database: |
| 179 | $·sudo·/usr/sbin/aide·--init | 179 | $·sudo·/usr/sbin/aide·--init |
| 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 180 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 181 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 182 | To·initiate·a·manual·check,·run·the·following·command: | 182 | To·initiate·a·manual·check,·run·the·following·command: |
| 183 | $·sudo·/usr/sbin/aide·--check | 183 | $·sudo·/usr/sbin/aide·--check |
| Offset 326, 46 lines modified | Offset 326, 46 lines modified | ||
| 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 326 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 327 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 328 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 329 | [[customizations.filesystem]] | 329 | [[customizations.filesystem]] |
| 330 | mountpoint·=·"/home" | 330 | mountpoint·=·"/home" |
| 331 | size·=·1073741824 | 331 | size·=·1073741824 |
| 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 333 | logvol·/home·1024 | ||
| 334 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 332 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 275445/281156 bytes (97.97%) of diff not shown. | |||
| Offset 14315, 16 lines modified | Offset 14315, 16 lines modified | ||
| 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ea0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037eb0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ec0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ed0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037ee0:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037ef0:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·2861·7320·6f66·2032·3032·3 | 00037f10:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037f20:·3 | 00037f20:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f30:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f40:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f50:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f60:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f70:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037f80:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037f90:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15113, 237 lines modified | Offset 15113, 237 lines modified | ||
| 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b080:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b090:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b0a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b0b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b0c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b0d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b0e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b0f0:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b100:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | |||
| 0003b110:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b100:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b110:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b120:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b130:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b140:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b150:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b160:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b170:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b180:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b190:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b1a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b1b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b1c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b1d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b1e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b1f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b200:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0003b210:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0003b220:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b230:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b240:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b250:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b260:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b270:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b280:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b290:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b2a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b2b0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b2c0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b2d0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b2e0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b2f0:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b300:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b310:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b320:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b330:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b340:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b350:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 0003b360:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 0003b370:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 0003b380:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 0003b390:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 0003b3a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 0003b3b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 0003b3c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 0003b3d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 0003b3e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 0003b3f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 0003b400:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b410:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b420:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b430:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b440:·7461·7267·6574·3d22·2369·646d·3834·3037··target="#idm8407 | |||
| 0003b450:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b460:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b470:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b480:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b490:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b4a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b4b0:·696f·6e20·5075·7070·6574·2073·6e69·7070··ion·Puppet·snipp | |||
| 0003b4c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4f0:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b500:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b510:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b520:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b530:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b540:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b550:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b560:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b570:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b580:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b590:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b5a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b5b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b5c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b5d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5f0:·653e·3c63·6f64·653e·696e·636c·7564·6520··e><code>include· | |||
| 0003b600:·696e·7374·616c·6c5f·6169·6465·0a0a·636c··install_aide..cl | |||
| 0003b610:·6173·7320·696e·7374·616c·6c5f·6169·6465··ass·install_aide | |||
| 0003b620:·207b·0a20·2070·6163·6b61·6765·207b·2027···{.··package·{·' | |||
| 0003b630:·6169·6465·273a·0a20·2020·2065·6e73·7572··aide':.····ensur | |||
| 0003b640:·6520·3d26·6774·3b20·2769·6e73·7461·6c6c··e·=>·'install | |||
| 0003b650:·6564·272c·0a20·207d·0a7d·0a3c·2f63·6f64··ed',.··}.}.</cod | |||
| 0003b660:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b670:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b680:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b690:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b6a0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b6b0:·6d38·3430·3822·2074·6162·696e·6465·783d··m8408"·tabindex= | |||
| 0003b6c0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b6d0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b6e0:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b6f0:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b700:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b710:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | |||
| 0003b720:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | |||
| 0003b730:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| Max diff block lines reached; 5642398/5675020 bytes (99.43%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········4.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 104, 14 lines modified | Offset 104, 33 lines modified | ||
| 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 104 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 105 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 106 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 107 | ·············_\x8c_\x8i_\x8s············6.1.1 | 107 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | [[packages]] | ||
| 113 | name·=·"aide" | ||
| 114 | version·=·"*" | ||
| 115 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 116 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 117 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 118 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 119 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 120 | package·--add=aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package·install·aide | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | -·name:·Ensure·aide·is·installed | 132 | -·name:·Ensure·aide·is·installed |
| 117 | ··package: | 133 | ··package: |
| Offset 127, 38 lines modified | Offset 146, 14 lines modified | ||
| 127 | ··-·PCI-DSSv4-11.5.2 | 146 | ··-·PCI-DSSv4-11.5.2 |
| 128 | ··-·enable_strategy | 147 | ··-·enable_strategy |
| 129 | ··-·low_complexity | 148 | ··-·low_complexity |
| 130 | ··-·low_disruption | 149 | ··-·low_disruption |
| 131 | ··-·medium_severity | 150 | ··-·medium_severity |
| 132 | ··-·no_reboot_needed | 151 | ··-·no_reboot_needed |
| 133 | ··-·package_aide_installed | 152 | ··-·package_aide_installed |
| 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 139 | include·install_aide | ||
| 140 | class·install_aide·{ | ||
| 141 | ··package·{·'aide': | ||
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 145 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 146 | [[packages]] | ||
| 147 | name·=·"aide" | ||
| 148 | version·=·"*" | ||
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | package·install·aide | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 160 | #·Remediation·is·applicable·only·in·certain·platforms | 158 | #·Remediation·is·applicable·only·in·certain·platforms |
| 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 159 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 166, 21 lines modified | Offset 161, 26 lines modified | ||
| 166 | if·!·rpm·-q·--quiet·"aide"·;·then | 161 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 167 | ····dnf·install·-y·"aide" | 162 | ····dnf·install·-y·"aide" |
| 168 | fi | 163 | fi |
| 169 | else | 164 | else |
| 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 165 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 171 | fi | 166 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | include·install_aide | ||
| 177 | 173 | class·install_aide·{ | |
| 174 | ··package·{·'aide': | ||
| 175 | ····ensure·=>·'installed', | ||
| 176 | ··} | ||
| 177 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 179 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/sbin/aide·--init | 180 | $·sudo·/usr/sbin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 182 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 183 | To·initiate·a·manual·check,·run·the·following·command: | 183 | To·initiate·a·manual·check,·run·the·following·command: |
| 184 | $·sudo·/usr/sbin/aide·--check | 184 | $·sudo·/usr/sbin/aide·--check |
| Offset 831, 46 lines modified | Offset 831, 46 lines modified | ||
| 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 831 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 832 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 833 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 834 | [[customizations.filesystem]] | 834 | [[customizations.filesystem]] |
| 835 | mountpoint·=·"/home" | 835 | mountpoint·=·"/home" |
| 836 | size·=·1073741824 | 836 | size·=·1073741824 |
| 837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 838 | logvol·/home·1024 | ||
| 839 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 837 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 286238/291896 bytes (98.06%) of diff not shown. | |||
| Offset 14317, 16 lines modified | Offset 14317, 16 lines modified | ||
| 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | 00037ec0:·6e20·4869·7374·6f72·793c·2f68·323e·3c70··n·History</h2><p | ||
| 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | 00037ed0:·3e43·7572·7265·6e74·2076·6572·7369·6f6e··>Current·version | ||
| 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | 00037ee0:·3a20·3c73·7472·6f6e·673e·302e·312e·3734··:·<strong>0.1.74 | ||
| 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | 00037ef0:·3c2f·7374·726f·6e67·3e3c·2f70·3e3c·756c··</strong></p><ul | ||
| 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | 00037f00:·3e3c·6c69·3e3c·7374·726f·6e67·3e64·7261··><li><strong>dra | ||
| 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | 00037f10:·6674·3c2f·7374·726f·6e67·3e0a·2020·2020··ft</strong>.···· | ||
| 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f20:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f30:·2861·7320·6f66·2032·3032·3 | 00037f30:·2861·7320·6f66·2032·3032·352d·3031·2d32··(as·of·2025-01-2 | ||
| 00037f40:·3 | 00037f40:·3329·0a20·2020·2020·2020·2020·2020·2020··3).············· | ||
| 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | 00037f50:·2020·203c·2f6c·693e·3c2f·756c·3e3c·2f64·····</li></ul></d | ||
| 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | 00037f60:·6976·3e3c·6832·3e54·6162·6c65·206f·6620··iv><h2>Table·of· | ||
| 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | 00037f70:·436f·6e74·656e·7473·3c2f·6832·3e3c·6f6c··Contents</h2><ol | ||
| 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | 00037f80:·3e3c·6c69·3e3c·6120·6872·6566·3d22·2378··><li><a·href="#x | ||
| 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | 00037f90:·6363·6466·5f6f·7267·2e73·7367·7072·6f6a··ccdf_org.ssgproj | ||
| 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | 00037fa0:·6563·742e·636f·6e74·656e·745f·6772·6f75··ect.content_grou | ||
| 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | 00037fb0:·705f·7379·7374·656d·223e·5379·7374·656d··p_system">System | ||
| Offset 15104, 236 lines modified | Offset 15104, 236 lines modified | ||
| 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003aff0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | 0003b000:·3834·3036·2220·7461·6269·6e64·6578·3d22··8406"·tabindex=" | ||
| 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b010:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b020:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b030:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b040:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b050:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b060:·6469·6174·696f·6e20·4 | 0003b060:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b070:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b080:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b090:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b0a0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b0b0:·3430·3622·3e3c·7461·626c·6520·636c·6173··406"><table·clas | |||
| 0003b0c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b0d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b0e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b0f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b | 0003b070:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | ||
| 0003b080:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b090:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b0a0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b0b0:·2220·6964·3d22·6964·6d38·3430·3622·3e3c··"·id="idm8406">< | |||
| 0003b0c0:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b0d0:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b0e0:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b0f0:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | |||
| 0003b100:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003b110:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003b120:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003b130:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003b140:·7267·6574·3d22·2369·646d·3834·3037·2220··rget="#idm8407"· | |||
| 0003b150:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003b160:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003b170:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003b180:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003b190:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003b1a0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003b1b0:·6e20·416e·6163·6f6e·6461·2073·6e69·7070··n·Anaconda·snipp | |||
| 0003b1c0:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b1d0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b1e0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b1f0:·6522·2069·643d·2269·646d·3834·3037·223e··e"·id="idm8407"> | |||
| 0003b200:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b210:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b220:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b230:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b240:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b250:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b260:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b270:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b | 0003b280:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 0003b | 0003b290:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | ||
| 0003b2a0:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b2b0:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | |||
| 0003b2c0:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | |||
| 0003b2d0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b2e0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b2f0:·653e·3c63·6f64·653e·0a70·6163·6b61·6765··e><code>.package | |||
| 0003b300:·202d·2d61·6464·3d61·6964·650a·3c2f·636f···--add=aide.</co | |||
| 0003b310:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003b320:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003b330:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003b340:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003b350:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003b360:·646d·3834·3038·2220·7461·6269·6e64·6578··dm8408"·tabindex | |||
| 0003b370:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003b380:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003b390:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003b3a0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003b3b0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003b3c0:·6d65·6469·6174·696f·6e20·7363·7269·7074··mediation·script | |||
| 0003b3d0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b3e0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b3f0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b400:·2069·643d·2269·646d·3834·3038·223e·3c74···id="idm8408"><t | |||
| 0003b410:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b420:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b430:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b440:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b450:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b | 0003b460:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 0003b | 0003b470:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 0003b150:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b160:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b170:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b180:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b190:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b1a0:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b1b0:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b1c0:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b1d0:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b1e0:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b1f0:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b200:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b210:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b220:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b230:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b240:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b250:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b260:·0a20·202d·2043·4345·2d39·3038·3433·2d34··.··-·CCE-90843-4 | |||
| 0003b270:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b280:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b290:·2d52·4845·4c2d·3039·2d36·3531·3031·300a··-RHEL-09-651010. | |||
| 0003b2a0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b2b0:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b2c0:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b2d0:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b2e0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b2f0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b300:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| Max diff block lines reached; 3193094/3225578 bytes (98.99%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 58 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 59 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 119, 14 lines modified | Offset 119, 33 lines modified | ||
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 120 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 121 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 122 | ·············_\x8c_\x8i_\x8s············6.1.1 | 122 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 127 | [[packages]] | ||
| 128 | name·=·"aide" | ||
| 129 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 135 | package·--add=aide | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | package·install·aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 142 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 143 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 144 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 145 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 146 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 131 | -·name:·Ensure·aide·is·installed | 147 | -·name:·Ensure·aide·is·installed |
| 132 | ··package: | 148 | ··package: |
| Offset 142, 38 lines modified | Offset 161, 14 lines modified | ||
| 142 | ··-·PCI-DSSv4-11.5.2 | 161 | ··-·PCI-DSSv4-11.5.2 |
| 143 | ··-·enable_strategy | 162 | ··-·enable_strategy |
| 144 | ··-·low_complexity | 163 | ··-·low_complexity |
| 145 | ··-·low_disruption | 164 | ··-·low_disruption |
| 146 | ··-·medium_severity | 165 | ··-·medium_severity |
| 147 | ··-·no_reboot_needed | 166 | ··-·no_reboot_needed |
| 148 | ··-·package_aide_installed | 167 | ··-·package_aide_installed |
| 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 154 | include·install_aide | ||
| 155 | class·install_aide·{ | ||
| 156 | ··package·{·'aide': | ||
| 157 | ····ensure·=>·'installed', | ||
| 158 | ··} | ||
| 159 | } | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | [[packages]] | ||
| 162 | name·=·"aide" | ||
| 163 | version·=·"*" | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 169 | package·install·aide | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 173 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 181, 21 lines modified | Offset 176, 26 lines modified | ||
| 181 | if·!·rpm·-q·--quiet·"aide"·;·then | 176 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 182 | ····dnf·install·-y·"aide" | 177 | ····dnf·install·-y·"aide" |
| 183 | fi | 178 | fi |
| 184 | else | 179 | else |
| 185 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 186 | fi | 181 | fi |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 187 | include·install_aide | ||
| 192 | 188 | class·install_aide·{ | |
| 189 | ··package·{·'aide': | ||
| 190 | ····ensure·=>·'installed', | ||
| 191 | ··} | ||
| 192 | } | ||
| 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 193 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 194 | Run·the·following·command·to·generate·a·new·database: | 194 | Run·the·following·command·to·generate·a·new·database: |
| 195 | $·sudo·/usr/sbin/aide·--init | 195 | $·sudo·/usr/sbin/aide·--init |
| 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the | 196 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the |
| 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these | 197 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these |
| 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 198 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 199 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 365, 24 lines modified | Offset 365, 24 lines modified | ||
| 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 | 365 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-231010 |
| 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule | 366 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257843r925516_rule |
| 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 367 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 368 | [[customizations.filesystem]] | 368 | [[customizations.filesystem]] |
| 369 | mountpoint·=·"/home" | 369 | mountpoint·=·"/home" |
| 370 | size·=·1073741824 | 370 | size·=·1073741824 |
| 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 372 | logvol·/home·1024 | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 371 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| Max diff block lines reached; 192851/198451 bytes (97.18%) of diff not shown. | |||
| Offset 14316, 15 lines modified | Offset 14316, 15 lines modified | ||
| 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | 00037eb0:·7374·6f72·793c·2f68·323e·3c70·3e43·7572··story</h2><p>Cur | ||
| 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | 00037ec0:·7265·6e74·2076·6572·7369·6f6e·3a20·3c73··rent·version:·<s | ||
| 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | 00037ed0:·7472·6f6e·673e·302e·312e·3734·3c2f·7374··trong>0.1.74</st | ||
| 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | 00037ee0:·726f·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69··rong></p><ul><li | ||
| 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | 00037ef0:·3e3c·7374·726f·6e67·3e64·7261·6674·3c2f··><strong>draft</ | ||
| 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | 00037f00:·7374·726f·6e67·3e0a·2020·2020·2020·2020··strong>.········ | ||
| 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | 00037f10:·2020·2020·2020·2020·2020·2020·2861·7320··············(as· | ||
| 00037f20:·6f66·2032·3032·3 | 00037f20:·6f66·2032·3032·352d·3031·2d32·3329·0a20··of·2025-01-23).· | ||
| 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | 00037f30:·2020·2020·2020·2020·2020·2020·2020·203c·················< | ||
| 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | 00037f40:·2f6c·693e·3c2f·756c·3e3c·2f64·6976·3e3c··/li></ul></div>< | ||
| 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | 00037f50:·6832·3e54·6162·6c65·206f·6620·436f·6e74··h2>Table·of·Cont | ||
| 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | 00037f60:·656e·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69··ents</h2><ol><li | ||
| 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | 00037f70:·3e3c·6120·6872·6566·3d22·2378·6363·6466··><a·href="#xccdf | ||
| 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | 00037f80:·5f6f·7267·2e73·7367·7072·6f6a·6563·742e··_org.ssgproject. | ||
| 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | 00037f90:·636f·6e74·656e·745f·6772·6f75·705f·7379··content_group_sy | ||
| Offset 14766, 218 lines modified | Offset 14766, 218 lines modified | ||
| 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | 00039ad0:·6172·6765·743d·2223·6964·6d31·3237·3539··arget="#idm12759 | ||
| 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00039ae0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00039af0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00039b00:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00039b10:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00039b20:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00039b30:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00039b40:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00039b50:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00039b60:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00039b70:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00039b80:·7365·2220·6964·3d22·6964·6d31·3237·3539··se"·id="idm12759 | |||
| 00039b90:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039ba0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039bb0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039bc0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039bd0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039be0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039bf0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039c00:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039c10:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039c20:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039 | 00039b40:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 00039b50:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 00039b60:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00039b70:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00039b80:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00039b90:·3d22·6964·6d31·3237·3539·223e·3c70·7265··="idm12759"><pre | |||
| 00039ba0:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 00039bb0:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | |||
| 00039bc0:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | |||
| 00039bd0:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 00039be0:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039bf0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039c00:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039c10:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039c20:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039c30:·3132·3736·3022·2074·6162·696e·6465·783d··12760"·tabindex= | |||
| 00039c40:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 00039c50:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 00039c60:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 00039c70:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 00039c80:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 00039c90:·6564·6961·7469·6f6e·2041·6e61·636f·6e64··ediation·Anacond | |||
| 00039ca0:·6120·736e·6970·7065·7420·e287·b23c·2f61··a·snippet·...</a | |||
| 00039cb0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00039cc0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00039cd0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00039ce0:·6d31·3237·3630·223e·3c74·6162·6c65·2063··m12760"><table·c | |||
| 00039cf0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 00039d00:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 00039d10:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 00039d20:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 00039d30:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 00039d40:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 00039d50:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 00039d60:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 00039d70:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039d80:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 00039d90:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 00039da0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 00039db0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 00039 | 00039dc0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | ||
| 00039dd0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 00039de0:·0a70·6163·6b61·6765·202d·2d61·6464·3d64··.package·--add=d | |||
| 00039c50:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039c60:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039c70:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039c80:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039c90:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039ca0:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039cb0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039cc0:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039cd0:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039ce0:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039cf0:·3a0a·2020·2d20·4343·452d·3833·3435·342d··:.··-·CCE-83454- | |||
| 00039d00:·390a·2020·2d20·656e·6162·6c65·5f73·7472··9.··-·enable_str | |||
| 00039d10:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039d20:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039d30:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039d40:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039d50:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039d60:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039d | 00039df0:·6e66·2d61·7574·6f6d·6174·6963·0a3c·2f63··nf-automatic.</c | ||
| 00039d80:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039 | 00039e00:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | ||
| 00039 | 00039e10:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | ||
| 00039 | 00039e20:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | ||
| 00039 | 00039e30:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | ||
| 00039 | 00039e40:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 00039 | 00039e50:·6964·6d31·3237·3631·2220·7461·6269·6e64··idm12761"·tabind | ||
| 00039 | 00039e60:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00039e | 00039e70:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00039e | 00039e80:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00039e | 00039e90:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00039e | 00039ea0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00039e | 00039eb0:·5265·6d65·6469·6174·696f·6e20·7363·7269··Remediation·scri | ||
| 00039ec0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 00039ed0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 00039ee0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 00039ef0:·6522·2069·643d·2269·646d·3132·3736·3122··e"·id="idm12761" | |||
| 00039f00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00039f10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00039f20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00039f30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00039f40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00039f50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00039f60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 00039f70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00039f80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00039f90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| Max diff block lines reached; 371860/401722 bytes (92.57%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 48 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 49 | ····*·cpe:/o:redhat:enterprise_linux:9 | 49 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 57 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 58 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 59 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 83, 14 lines modified | Offset 83, 33 lines modified | ||
| 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 83 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 84 | ·············suitable·for·automatic,·regular·execution. | 84 | ·············suitable·for·automatic,·regular·execution. |
| 85 | Severity: ···medium | 85 | Severity: ···medium |
| 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 86 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 87 | Identifiers:·CCE-83454-9 | 87 | Identifiers:·CCE-83454-9 |
| 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 88 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 89 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 91 | [[packages]] | ||
| 92 | name·=·"dnf-automatic" | ||
| 93 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 99 | package·--add=dnf-automatic | ||
| 100 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 101 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 102 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 103 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 104 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 105 | package·install·dnf-automatic | ||
| 90 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 106 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 91 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 107 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 92 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 108 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 93 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 109 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 94 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 110 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 95 | -·name:·Ensure·dnf-automatic·is·installed | 111 | -·name:·Ensure·dnf-automatic·is·installed |
| 96 | ··package: | 112 | ··package: |
| Offset 100, 54 lines modified | Offset 119, 35 lines modified | ||
| 100 | ··-·CCE-83454-9 | 119 | ··-·CCE-83454-9 |
| 101 | ··-·enable_strategy | 120 | ··-·enable_strategy |
| 102 | ··-·low_complexity | 121 | ··-·low_complexity |
| 103 | ··-·low_disruption | 122 | ··-·low_disruption |
| 104 | ··-·medium_severity | 123 | ··-·medium_severity |
| 105 | ··-·no_reboot_needed | 124 | ··-·no_reboot_needed |
| 106 | ··-·package_dnf-automatic_installed | 125 | ··-·package_dnf-automatic_installed |
| 107 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 108 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 109 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 110 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 111 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 112 | include·install_dnf-automatic | ||
| 113 | class·install_dnf-automatic·{ | ||
| 114 | ··package·{·'dnf-automatic': | ||
| 115 | ····ensure·=>·'installed', | ||
| 116 | ··} | ||
| 117 | } | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"dnf-automatic" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·dnf-automatic | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 133 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then | 131 | if·!·rpm·-q·--quiet·"dnf-automatic"·;·then |
| 134 | ····dnf·install·-y·"dnf-automatic" | 132 | ····dnf·install·-y·"dnf-automatic" |
| 135 | fi | 133 | fi |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 139 | include·install_dnf-automatic | ||
| 140 | class·install_dnf-automatic·{ | ||
| 141 | package· | 141 | ··package·{·'dnf-automatic': |
| 142 | ····ensure·=>·'installed', | ||
| 143 | ··} | ||
| 144 | } | ||
| 142 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 145 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 143 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed | 146 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically·installed |
| 144 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 147 | by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 145 | automatic.conf. | 148 | automatic.conf. |
| 146 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation | 149 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the·exploitation |
| 147 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and | 150 | ·············of·publicly-known·vulnerabilities.·If·the·most·recent·security·patches·and |
| 148 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in | 151 | Rationale:···updates·are·not·installed,·unauthorized·users·may·take·advantage·of·weaknesses·in |
| Offset 9608, 14 lines modified | Offset 9608, 28 lines modified | ||
| 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 9608 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.2,·A.12.5.1,·A.12.6.2,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 9609 | ····························A.9.1.2 | 9609 | ····························A.9.1.2 |
| 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 9610 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 | 9611 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.IP-1,·PR.PT-3 |
| 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 | 9612 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R62 |
| 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 | 9613 | ·············_\x8c_\x8i_\x8s············2.1.3 |
| 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 | 9614 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········2.2.4 |
| 9615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9616 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9617 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9618 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9619 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 9620 | package·--remove=dhcp-server | ||
| 9621 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 9622 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9623 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| Max diff block lines reached; 43034/48994 bytes (87.84%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037dd0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037de0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037df0:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e00:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e10:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e20:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2028·6173·206f·6620·3230·323 | 00037e40:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00037e50:·3 | 00037e50:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e60:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e70:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e80:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037e90:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ea0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037eb0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ec0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15169, 252 lines modified | Offset 15169, 252 lines modified | ||
| 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b400:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b410:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b420:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b430:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b440:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b450:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b460:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b470:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b470:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b480:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b490:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b4a0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b4b0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b4c0:·2269·646d·3932·3030·223e·3c74·6162·6c65··"idm9200"><table | |||
| 0003b4d0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b4e0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b4f0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b500:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b510:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b480:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b490:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4a0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4b0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4c0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4d0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4e0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b4f0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b500:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b510:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b520:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b530:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b540:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b5 | 0003b520:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b560:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b5 | 0003b530:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b540:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b550:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b560:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b570:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b580:· | 0003b580:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b590:· | 0003b590:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b5a0:· | 0003b5a0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b5b0:· | 0003b5b0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b5c0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5d0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5e0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b5f0:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b600:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b610:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b620:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b630:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b640:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b650:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b660:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b670:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b680:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b690:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6a0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6b0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6c0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6d0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6e0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b6f0:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b700:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b710:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b720:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b730:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 0003b740:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b750:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b760:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b770:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b780:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b790:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7a0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7b0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7c0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7d0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7e0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b7f0:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b800:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b810:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b820:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b830:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b840:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b850:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b860:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b870:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b880:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b890:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b8a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8d0:·646d·3932·3031·223e·3c74·6162·6c65·2063··dm9201"><table·c | |||
| 0003b8e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b8f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b900:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b910:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b920:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b930:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b940:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b950:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b960:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b970:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b980:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b990:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9a0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003b9b0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003b9c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b | 0003b5c0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | ||
| 0003b | 0003b5d0:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003b | 0003b5e0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| Max diff block lines reached; 2522019/2556711 bytes (98.64%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Advanced | 43 | ··············Linux·9·-·Advanced |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_advanced |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 39 lines modified | Offset 104, 14 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 116 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 142 | ··set_fact: | 117 | ··set_fact: |
| Offset 206, 14 lines modified | Offset 181, 39 lines modified | ||
| 206 | » echo·"to·see·what·package·to·(re)install"·>&2 | 181 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 207 | » false··#·end·with·an·error·code | 182 | » false··#·end·with·an·error·code |
| 208 | elif·test·"$rc"·!=·0;·then | 183 | elif·test·"$rc"·!=·0;·then |
| 209 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 184 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 210 | » false··#·end·with·an·error·code | 185 | » false··#·end·with·an·error·code |
| 211 | fi | 186 | fi |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 192 | --- | ||
| 193 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 194 | kind:·MachineConfig | ||
| 195 | spec: | ||
| 196 | ··config: | ||
| 197 | ····ignition: | ||
| 198 | ······version:·3.1.0 | ||
| 199 | ····systemd: | ||
| 200 | ······units: | ||
| 201 | ········-·name:·configure-crypto-policy.service | ||
| 202 | ··········enabled:·true | ||
| 203 | ··········contents:·| | ||
| 204 | ············[Unit] | ||
| 205 | ············Before=kubelet.service | ||
| 206 | ············[Service] | ||
| 207 | ············Type=oneshot | ||
| 208 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 209 | ············RemainAfterExit=yes | ||
| 210 | ············[Install] | ||
| 211 | ············WantedBy=multi-user.target | ||
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 213 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 213 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 214 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 214 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 215 | Severity: ···medium | 215 | Severity: ···medium |
| 216 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 216 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 217 | Identifiers:·CCE-83445-7 | 217 | Identifiers:·CCE-83445-7 |
| 218 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 218 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1776, 14 lines modified | Offset 1776, 33 lines modified | ||
| 1776 | $·sudo·dnf·install·cryptsetup | 1776 | $·sudo·dnf·install·cryptsetup |
| 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. | 1777 | Rationale:···LUKS·is·the·upcoming·standard·for·Linux·hard·disk·encryption.·By·providing·a·standard·on-disk·format,·it·does·not·only·facilitate·compatibility·among·distributions,·but·also·provide·secure·management·of·multiple·user·passwords.·In·contrast·to·existing·solution,·LUKS·stores·all·necessary·setup·information·in·the·partition·header,·enabling·the·user·to·transport·or·migrate·their·data·seamlessly.·LUKS·for·dm-crypt·is·implemented·in·cryptsetup. |
| 1778 | Severity: ···medium | 1778 | Severity: ···medium |
| 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed | 1779 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed |
| 1780 | Identifiers:·CCE-86612-9 | 1780 | Identifiers:·CCE-86612-9 |
| 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 | 1781 | References:··_\x8c_\x8c_\x8n·····A.25.SEC-RHEL1 |
| 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 | 1782 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·3.5.1.2 |
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1784 | [[packages]] | ||
| 1785 | name·=·"cryptsetup" | ||
| 1786 | version·=·"*" | ||
| 1787 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1788 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1789 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1790 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1791 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1792 | package·--add=cryptsetup | ||
| 1793 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1794 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1795 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1796 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1797 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1798 | package·install·cryptsetup | ||
| 1783 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1799 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1784 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1800 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1785 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1801 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1786 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1802 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1787 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1803 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 153935/160396 bytes (95.97%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037dd0:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037de0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037df0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037e00:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037e10:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037e20:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037e30:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e40:·323 | 00037e40:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e50:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e60:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e70:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e80:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e90:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037ea0:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037eb0:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15129, 252 lines modified | Offset 15129, 252 lines modified | ||
| 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b180:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | 0003b190:·3d22·2369·646d·3932·3030·2220·7461·6269··="#idm9200"·tabi | ||
| 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b1a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b1b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b1c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b1d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b1e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b1f0:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b1f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b200:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b210:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b220:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b230:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b240:·3d22·6964·6d39·3230·3022·3e3c·7461·626c··="idm9200"><tabl | |||
| 0003b250:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b260:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b270:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b280:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b290:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b200:·6265·726e·6574·6573·2073·6e69·7070·6574··bernetes·snippet | |||
| 0003b210:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b220:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b230:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b240:·2069·643d·2269·646d·3932·3030·223e·3c74···id="idm9200"><t | |||
| 0003b250:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b260:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b270:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b280:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b290:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b2a0:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b2b0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b2c0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b2 | 0003b2a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | ||
| 0003b2e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b2 | 0003b2b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | ||
| 0003b2c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b2d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b2e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b2f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b300:· | 0003b300:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b310:· | 0003b310:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | ||
| 0003b320:· | 0003b320:·7265·7374·7269·6374·3c2f·7464·3e3c·2f74··restrict</td></t | ||
| 0003b330:· | 0003b330:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | ||
| 0003b340:·3e3c·636f·6465·3e2d·2d2d·0a61·7069·5665··><code>---.apiVe | |||
| 0003b350:·7273·696f·6e3a·206d·6163·6869·6e65·636f··rsion:·machineco | |||
| 0003b360:·6e66·6967·7572·6174·696f·6e2e·6f70·656e··nfiguration.open | |||
| 0003b370:·7368·6966·742e·696f·2f76·310a·6b69·6e64··shift.io/v1.kind | |||
| 0003b380:·3a20·4d61·6368·696e·6543·6f6e·6669·670a··:·MachineConfig. | |||
| 0003b390:·7370·6563·3a0a·2020·636f·6e66·6967·3a0a··spec:.··config:. | |||
| 0003b3a0:·2020·2020·6967·6e69·7469·6f6e·3a0a·2020······ignition:.·· | |||
| 0003b3b0:·2020·2020·7665·7273·696f·6e3a·2033·2e31······version:·3.1 | |||
| 0003b3c0:·2e30·0a20·2020·2073·7973·7465·6d64·3a0a··.0.····systemd:. | |||
| 0003b3d0:·2020·2020·2020·756e·6974·733a·0a20·2020········units:.··· | |||
| 0003b3e0:·2020·2020·202d·206e·616d·653a·2063·6f6e·······-·name:·con | |||
| 0003b3f0:·6669·6775·7265·2d63·7279·7074·6f2d·706f··figure-crypto-po | |||
| 0003b400:·6c69·6379·2e73·6572·7669·6365·0a20·2020··licy.service.··· | |||
| 0003b410:·2020·2020·2020·2065·6e61·626c·6564·3a20·········enabled:· | |||
| 0003b420:·7472·7565·0a20·2020·2020·2020·2020·2063··true.··········c | |||
| 0003b430:·6f6e·7465·6e74·733a·207c·0a20·2020·2020··ontents:·|.····· | |||
| 0003b440:·2020·2020·2020·205b·556e·6974·5d0a·2020·········[Unit].·· | |||
| 0003b450:·2020·2020·2020·2020·2020·4265·666f·7265············Before | |||
| 0003b460:·3d6b·7562·656c·6574·2e73·6572·7669·6365··=kubelet.service | |||
| 0003b470:·0a20·2020·2020·2020·2020·2020·205b·5365··.············[Se | |||
| 0003b480:·7276·6963·655d·0a20·2020·2020·2020·2020··rvice].········· | |||
| 0003b490:·2020·2054·7970·653d·6f6e·6573·686f·740a·····Type=oneshot. | |||
| 0003b4a0:·2020·2020·2020·2020·2020·2020·4578·6563··············Exec | |||
| 0003b4b0:·5374·6172·743d·7570·6461·7465·2d63·7279··Start=update-cry | |||
| 0003b4c0:·7074·6f2d·706f·6c69·6369·6573·202d·2d73··pto-policies·--s | |||
| 0003b4d0:·6574·207b·7b2e·7661·725f·7379·7374·656d··et·{{.var_system | |||
| 0003b4e0:·5f63·7279·7074·6f5f·706f·6c69·6379·7d7d··_crypto_policy}} | |||
| 0003b4f0:·0a20·2020·2020·2020·2020·2020·2052·656d··.············Rem | |||
| 0003b500:·6169·6e41·6674·6572·4578·6974·3d79·6573··ainAfterExit=yes | |||
| 0003b510:·0a20·2020·2020·2020·2020·2020·205b·496e··.············[In | |||
| 0003b520:·7374·616c·6c5d·0a20·2020·2020·2020·2020··stall].········· | |||
| 0003b530:·2020·2057·616e·7465·6442·793d·6d75·6c74·····WantedBy=mult | |||
| 0003b540:·692d·7573·6572·2e74·6172·6765·740a·3c2f··i-user.target.</ | |||
| 0003b550:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b560:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b570:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b580:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b590:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b5a0:·2369·646d·3932·3031·2220·7461·6269·6e64··#idm9201"·tabind | |||
| 0003b5b0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b5c0:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b5d0:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b5e0:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b5f0:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b600:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0003b610:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b620:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b630:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b640:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b650:·6964·6d39·3230·3122·3e3c·7461·626c·6520··idm9201"><table· | |||
| 0003b660:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b670:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b680:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b690:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b6a0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b6b0:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b6c0:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b6d0:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b6e0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b6f0:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b700:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b710:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b720:·7465·6779·3a3c·2f74·683e·3c74·643e·7265··tegy:</th><td>re | |||
| 0003b730:·7374·7269·6374·3c2f·7464·3e3c·2f74·723e··strict</td></tr> | |||
| 0003b740:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b | 0003b340:·636f·6465·3e2d·206e·616d·653a·2058·4343··code>-·name:·XCC | ||
| 0003b | 0003b350:·4446·2056·616c·7565·2076·6172·5f73·7973··DF·Value·var_sys | ||
| 0003b | 0003b360:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003b | 0003b370:·7920·2320·7072·6f6d·6f74·6520·746f·2076··y·#·promote·to·v | ||
| Max diff block lines reached; 2110387/2144941 bytes (98.39%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Basic | 43 | ··············Linux·9·-·Basic |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_basic |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 96, 39 lines modified | Offset 96, 14 lines modified | ||
| 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 96 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 97 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 98 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 99 | ·············_\x8c_\x8i_\x8s······1.6.1 | 99 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 100 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 101 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 108 | --- | ||
| 109 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 110 | kind:·MachineConfig | ||
| 111 | spec: | ||
| 112 | ··config: | ||
| 113 | ····ignition: | ||
| 114 | ······version:·3.1.0 | ||
| 115 | ····systemd: | ||
| 116 | ······units: | ||
| 117 | ········-·name:·configure-crypto-policy.service | ||
| 118 | ··········enabled:·true | ||
| 119 | ··········contents:·| | ||
| 120 | ············[Unit] | ||
| 121 | ············Before=kubelet.service | ||
| 122 | ············[Service] | ||
| 123 | ············Type=oneshot | ||
| 124 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 125 | ············RemainAfterExit=yes | ||
| 126 | ············[Install] | ||
| 127 | ············WantedBy=multi-user.target | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 103 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 104 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 105 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 106 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 107 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 133 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 108 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 134 | ··set_fact: | 109 | ··set_fact: |
| Offset 198, 14 lines modified | Offset 173, 39 lines modified | ||
| 198 | » echo·"to·see·what·package·to·(re)install"·>&2 | 173 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 199 | » false··#·end·with·an·error·code | 174 | » false··#·end·with·an·error·code |
| 200 | elif·test·"$rc"·!=·0;·then | 175 | elif·test·"$rc"·!=·0;·then |
| 201 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 176 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 202 | » false··#·end·with·an·error·code | 177 | » false··#·end·with·an·error·code |
| 203 | fi | 178 | fi |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 184 | --- | ||
| 185 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 186 | kind:·MachineConfig | ||
| 187 | spec: | ||
| 188 | ··config: | ||
| 189 | ····ignition: | ||
| 190 | ······version:·3.1.0 | ||
| 191 | ····systemd: | ||
| 192 | ······units: | ||
| 193 | ········-·name:·configure-crypto-policy.service | ||
| 194 | ··········enabled:·true | ||
| 195 | ··········contents:·| | ||
| 196 | ············[Unit] | ||
| 197 | ············Before=kubelet.service | ||
| 198 | ············[Service] | ||
| 199 | ············Type=oneshot | ||
| 200 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 201 | ············RemainAfterExit=yes | ||
| 202 | ············[Install] | ||
| 203 | ············WantedBy=multi-user.target | ||
| 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 204 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 205 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 205 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 206 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 206 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 207 | Severity: ···medium | 207 | Severity: ···medium |
| 208 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 208 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 209 | Identifiers:·CCE-83445-7 | 209 | Identifiers:·CCE-83445-7 |
| 210 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 210 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1097, 36 lines modified | Offset 1097, 14 lines modified | ||
| 1097 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 1097 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 1098 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 1098 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 1099 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 | 1099 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 |
| 1100 | ·············_\x8c_\x8c_\x8n············A.11.SEC-RHEL4 | 1100 | ·············_\x8c_\x8c_\x8n············A.11.SEC-RHEL4 |
| 1101 | ·············_\x8c_\x8i_\x8s············1.7.2 | 1101 | ·············_\x8c_\x8i_\x8s············1.7.2 |
| 1102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-211020 | 1102 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-211020 |
| 1103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule | 1103 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule |
| 1104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1105 | --- | ||
| 1106 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1107 | kind:·MachineConfig | ||
| 1108 | metadata: | ||
| 1109 | ··labels: | ||
| 1110 | ····machineconfiguration.openshift.io/role:·master | ||
| 1111 | ····machineconfiguration.openshift.io/role:·worker | ||
| 1112 | ··name:·75-banner-etc-issue | ||
| 1113 | spec: | ||
| 1114 | ··config: | ||
| 1115 | ····ignition: | ||
| 1116 | ······version:·3.1.0 | ||
| 1117 | ····storage: | ||
| 1118 | ······files: | ||
| 1119 | ······-·contents: | ||
| 1120 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 1121 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 1122 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 1123 | ········mode:·0644 | ||
| 1124 | ········path:·/etc/issue.d/legal-notice | ||
| 1125 | ········overwrite:·true | ||
| 1126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1104 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1105 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 98038/105756 bytes (92.70%) of diff not shown. | |||
| Offset 14303, 16 lines modified | Offset 14303, 16 lines modified | ||
| 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037de0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037df0:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e00:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e10:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e20:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e30:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e40:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e50:·2020·2028·6173·206f·6620·3230·323 | 00037e50:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00037e60:·3 | 00037e60:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e70:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e80:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037e90:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037ea0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037eb0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ec0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ed0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | ||
| Offset 15170, 252 lines modified | Offset 15170, 252 lines modified | ||
| 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 0003b410:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | 0003b420:·2223·6964·6d39·3230·3022·2074·6162·696e··"#idm9200"·tabin | ||
| 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0003b430:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0003b440:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0003b450:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0003b460:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0003b470:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0003b480:·3e52·656d·6564·6961·7469·6f6e·204 | 0003b480:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | ||
| 0003b490:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0003b4a0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b4b0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b4c0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b4d0:·2269·646d·3932·3030·223e·3c74·6162·6c65··"idm9200"><table | |||
| 0003b4e0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b4f0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b500:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b510:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b520:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0003b490:·6572·6e65·7465·7320·736e·6970·7065·7420··ernetes·snippet· | |||
| 0003b4a0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4b0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4c0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4d0:·6964·3d22·6964·6d39·3230·3022·3e3c·7461··id="idm9200"><ta | |||
| 0003b4e0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b4f0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b500:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b510:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b520:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b530:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b540:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b550:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b5 | 0003b530:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 0003b570:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b5 | 0003b540:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | ||
| 0003b550:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003b560:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b570:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0003b580:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0003b590:· | 0003b590:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | ||
| 0003b5a0:· | 0003b5a0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e72··ategy:</th><td>r | ||
| 0003b5b0:· | 0003b5b0:·6573·7472·6963·743c·2f74·643e·3c2f·7472··estrict</td></tr | ||
| 0003b5c0:· | 0003b5c0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | ||
| 0003b5d0:·3c63·6f64·653e·2d2d·2d0a·6170·6956·6572··<code>---.apiVer | |||
| 0003b5e0:·7369·6f6e·3a20·6d61·6368·696e·6563·6f6e··sion:·machinecon | |||
| 0003b5f0:·6669·6775·7261·7469·6f6e·2e6f·7065·6e73··figuration.opens | |||
| 0003b600:·6869·6674·2e69·6f2f·7631·0a6b·696e·643a··hift.io/v1.kind: | |||
| 0003b610:·204d·6163·6869·6e65·436f·6e66·6967·0a73···MachineConfig.s | |||
| 0003b620:·7065·633a·0a20·2063·6f6e·6669·673a·0a20··pec:.··config:.· | |||
| 0003b630:·2020·2069·676e·6974·696f·6e3a·0a20·2020·····ignition:.··· | |||
| 0003b640:·2020·2076·6572·7369·6f6e·3a20·332e·312e·····version:·3.1. | |||
| 0003b650:·300a·2020·2020·7379·7374·656d·643a·0a20··0.····systemd:.· | |||
| 0003b660:·2020·2020·2075·6e69·7473·3a0a·2020·2020·······units:.···· | |||
| 0003b670:·2020·2020·2d20·6e61·6d65·3a20·636f·6e66······-·name:·conf | |||
| 0003b680:·6967·7572·652d·6372·7970·746f·2d70·6f6c··igure-crypto-pol | |||
| 0003b690:·6963·792e·7365·7276·6963·650a·2020·2020··icy.service.···· | |||
| 0003b6a0:·2020·2020·2020·656e·6162·6c65·643a·2074········enabled:·t | |||
| 0003b6b0:·7275·650a·2020·2020·2020·2020·2020·636f··rue.··········co | |||
| 0003b6c0:·6e74·656e·7473·3a20·7c0a·2020·2020·2020··ntents:·|.······ | |||
| 0003b6d0:·2020·2020·2020·5b55·6e69·745d·0a20·2020········[Unit].··· | |||
| 0003b6e0:·2020·2020·2020·2020·2042·6566·6f72·653d···········Before= | |||
| 0003b6f0:·6b75·6265·6c65·742e·7365·7276·6963·650a··kubelet.service. | |||
| 0003b700:·2020·2020·2020·2020·2020·2020·5b53·6572··············[Ser | |||
| 0003b710:·7669·6365·5d0a·2020·2020·2020·2020·2020··vice].·········· | |||
| 0003b720:·2020·5479·7065·3d6f·6e65·7368·6f74·0a20····Type=oneshot.· | |||
| 0003b730:·2020·2020·2020·2020·2020·2045·7865·6353·············ExecS | |||
| 0003b740:·7461·7274·3d75·7064·6174·652d·6372·7970··tart=update-cryp | |||
| 0003b750:·746f·2d70·6f6c·6963·6965·7320·2d2d·7365··to-policies·--se | |||
| 0003b760:·7420·7b7b·2e76·6172·5f73·7973·7465·6d5f··t·{{.var_system_ | |||
| 0003b770:·6372·7970·746f·5f70·6f6c·6963·797d·7d0a··crypto_policy}}. | |||
| 0003b780:·2020·2020·2020·2020·2020·2020·5265·6d61··············Rema | |||
| 0003b790:·696e·4166·7465·7245·7869·743d·7965·730a··inAfterExit=yes. | |||
| 0003b7a0:·2020·2020·2020·2020·2020·2020·5b49·6e73··············[Ins | |||
| 0003b7b0:·7461·6c6c·5d0a·2020·2020·2020·2020·2020··tall].·········· | |||
| 0003b7c0:·2020·5761·6e74·6564·4279·3d6d·756c·7469····WantedBy=multi | |||
| 0003b7d0:·2d75·7365·722e·7461·7267·6574·0a3c·2f63··-user.target.</c | |||
| 0003b7e0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b7f0:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b800:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b810:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b820:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b830:·6964·6d39·3230·3122·2074·6162·696e·6465··idm9201"·tabinde | |||
| 0003b840:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b850:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b860:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b870:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b880:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b890:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0003b8a0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b8b0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b8c0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b8d0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b8e0:·646d·3932·3031·223e·3c74·6162·6c65·2063··dm9201"><table·c | |||
| 0003b8f0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b900:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b910:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b920:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b930:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b940:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b950:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b960:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b970:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b980:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b990:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b9a0:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b9b0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | |||
| 0003b9c0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | |||
| 0003b9d0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0003b | 0003b5d0:·6f64·653e·2d20·6e61·6d65·3a20·5843·4344··ode>-·name:·XCCD | ||
| 0003b | 0003b5e0:·4620·5661·6c75·6520·7661·725f·7379·7374··F·Value·var_syst | ||
| 0003b | 0003b5f0:·656d·5f63·7279·7074·6f5f·706f·6c69·6379··em_crypto_policy | ||
| Max diff block lines reached; 2492597/2527289 bytes (98.63%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Centro·Criptológico·Nacional·(CCN)·-·STIC·for·Red·Hat·Enterprise |
| 43 | ··············Linux·9·-·Intermediate | 43 | ··············Linux·9·-·Intermediate |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ccn_intermediate |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 104, 39 lines modified | Offset 104, 14 lines modified | ||
| 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 104 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 105 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 106 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 107 | ·············_\x8c_\x8i_\x8s······1.6.1 | 107 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 108 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 109 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 116 | --- | ||
| 117 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 118 | kind:·MachineConfig | ||
| 119 | spec: | ||
| 120 | ··config: | ||
| 121 | ····ignition: | ||
| 122 | ······version:·3.1.0 | ||
| 123 | ····systemd: | ||
| 124 | ······units: | ||
| 125 | ········-·name:·configure-crypto-policy.service | ||
| 126 | ··········enabled:·true | ||
| 127 | ··········contents:·| | ||
| 128 | ············[Unit] | ||
| 129 | ············Before=kubelet.service | ||
| 130 | ············[Service] | ||
| 131 | ············Type=oneshot | ||
| 132 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 133 | ············RemainAfterExit=yes | ||
| 134 | ············[Install] | ||
| 135 | ············WantedBy=multi-user.target | ||
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 141 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 116 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 142 | ··set_fact: | 117 | ··set_fact: |
| Offset 206, 14 lines modified | Offset 181, 39 lines modified | ||
| 206 | » echo·"to·see·what·package·to·(re)install"·>&2 | 181 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 207 | » false··#·end·with·an·error·code | 182 | » false··#·end·with·an·error·code |
| 208 | elif·test·"$rc"·!=·0;·then | 183 | elif·test·"$rc"·!=·0;·then |
| 209 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 184 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 210 | » false··#·end·with·an·error·code | 185 | » false··#·end·with·an·error·code |
| 211 | fi | 186 | fi |
| 187 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 188 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 189 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 190 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 191 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 192 | --- | ||
| 193 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 194 | kind:·MachineConfig | ||
| 195 | spec: | ||
| 196 | ··config: | ||
| 197 | ····ignition: | ||
| 198 | ······version:·3.1.0 | ||
| 199 | ····systemd: | ||
| 200 | ······units: | ||
| 201 | ········-·name:·configure-crypto-policy.service | ||
| 202 | ··········enabled:·true | ||
| 203 | ··········contents:·| | ||
| 204 | ············[Unit] | ||
| 205 | ············Before=kubelet.service | ||
| 206 | ············[Service] | ||
| 207 | ············Type=oneshot | ||
| 208 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 209 | ············RemainAfterExit=yes | ||
| 210 | ············[Install] | ||
| 211 | ············WantedBy=multi-user.target | ||
| 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 213 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 213 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 214 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 214 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 215 | Severity: ···medium | 215 | Severity: ···medium |
| 216 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 216 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 217 | Identifiers:·CCE-83445-7 | 217 | Identifiers:·CCE-83445-7 |
| 218 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 218 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 2182, 36 lines modified | Offset 2182, 14 lines modified | ||
| 2182 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 | 2182 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-7 |
| 2183 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 | 2183 | ·············_\x8o_\x8s_\x8p_\x8p···········FMT_MOF_EXT.1 |
| 2184 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 | 2184 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000023-GPOS-00006,·SRG-OS-000228-GPOS-00088 |
| 2185 | ·············_\x8c_\x8c_\x8n············A.11.SEC-RHEL4 | 2185 | ·············_\x8c_\x8c_\x8n············A.11.SEC-RHEL4 |
| 2186 | ·············_\x8c_\x8i_\x8s············1.7.2 | 2186 | ·············_\x8c_\x8i_\x8s············1.7.2 |
| 2187 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-211020 | 2187 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-211020 |
| 2188 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule | 2188 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-257779r925324_rule |
| 2189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2190 | --- | ||
| 2191 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 2192 | kind:·MachineConfig | ||
| 2193 | metadata: | ||
| 2194 | ··labels: | ||
| 2195 | ····machineconfiguration.openshift.io/role:·master | ||
| 2196 | ····machineconfiguration.openshift.io/role:·worker | ||
| 2197 | ··name:·75-banner-etc-issue | ||
| 2198 | spec: | ||
| 2199 | ··config: | ||
| 2200 | ····ignition: | ||
| 2201 | ······version:·3.1.0 | ||
| 2202 | ····storage: | ||
| 2203 | ······files: | ||
| 2204 | ······-·contents: | ||
| 2205 | ··········source:·data:,You%20are%20accessing%20a%20U.S.%20Government%20%28USG%29%20Information%20System%20%28IS%29%20that%20is%20%0Aprovided%20for%20USG-authorized%20use%20only.%20By%20using%20this%20IS%20%28which%20includes%20any%20%0Adevice%20attached%20to%20this%20IS%29%2C%20you%20consent%20to%20the%20following%20conditions%3A%0A%0A-The%20USG%20routinely%20intercepts%20and%20monitors%20communications%20on%20this%20IS%20for%20%0Apurposes%20including%2C%20but%20not%20limited%20to%2C%20penetration%20testing%2C%20COMSEC%20monitoring%2C%20%0Anetwork%20operations%20and%20defense%2C%20personnel%20misconduct%20%28PM%29%2C%20law%20enforcement%20%0A%28LE%29%2C%20and%20counterintelligence%20%28CI%29%20investigations.%0A%0A-At%20any%20time%2C%20the%20USG%20may%20inspect%20and%20seize%20data%20stored%20on%20this%20IS.%0A%0A- | ||
| 2206 | Communications%20using%2C%20or%20data%20stored%20on%2C%20this%20IS%20are%20not%20private%2C%20are%20subject%20%0Ato%20routine%20monitoring%2C%20interception%2C%20and%20search%2C%20and%20may%20be%20disclosed%20or%20used%20%0Afor%20any%20USG-authorized%20purpose.%0A%0A-This%20IS%20includes%20security%20measures%20%28e.g.%2C%20authentication%20and%20access%20controls%29%20%0Ato%20protect%20USG%20interests--not%20for%20your%20personal%20benefit%20or%20privacy.%0A%0A- | ||
| 2207 | Notwithstanding%20the%20above%2C%20using%20this%20IS%20does%20not%20constitute%20consent%20to%20PM%2C%20LE%20%0Aor%20CI%20investigative%20searching%20or%20monitoring%20of%20the%20content%20of%20privileged%20%0Acommunications%2C%20or%20work%20product%2C%20related%20to%20personal%20representation%20or%20services%20%0Aby%20attorneys%2C%20psychotherapists%2C%20or%20clergy%2C%20and%20their%20assistants.%20Such%20%0Acommunications%20and%20work%20product%20are%20private%20and%20confidential.%20See%20User%20%0AAgreement%20for%20details. | ||
| 2208 | ········mode:·0644 | ||
| 2209 | ········path:·/etc/issue.d/legal-notice | ||
| 2210 | ········overwrite:·true | ||
| 2211 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2189 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2212 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2190 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| Max diff block lines reached; 147972/155706 bytes (95.03%) of diff not shown. | |||
| Offset 14299, 15 lines modified | Offset 14299, 15 lines modified | ||
| 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037da0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037db0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037dc0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037dd0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037de0:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037df0:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e00:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e10:·6620·3230·323 | 00037e10:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e20:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e30:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e40:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e50:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e60:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e70:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037e80:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 15158, 237 lines modified | Offset 15158, 237 lines modified | ||
| 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b350:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | 0003b360:·6964·6d38·3430·3622·2074·6162·696e·6465··idm8406"·tabinde | ||
| 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b370:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b380:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b390:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b3a0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b3b0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b3c0:·656d·6564·6961·7469·6f6e·204 | 0003b3c0:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b3d0:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b3e0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b3f0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b400:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b410:·646d·3834·3036·223e·3c74·6162·6c65·2063··dm8406"><table·c | |||
| 0003b420:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b430:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b440:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b450:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b | 0003b3d0:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b3e0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3f0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b400:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b410:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b420:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b430:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b440:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b450:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b460:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b470:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b480:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b490:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b4a0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | |||
| 0003b4b0:·3722·2074·6162·696e·6465·783d·2230·2220··7"·tabindex="0"· | |||
| 0003b4c0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b4d0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b4e0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b4f0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b500:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b510:·7469·6f6e·2041·6e61·636f·6e64·6120·736e··tion·Anaconda·sn | |||
| 0003b520:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b530:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b540:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b550:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b560:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | |||
| 0003b570:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b580:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b590:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b5a0:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b5b0:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b5c0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b5d0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003b5e0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 0003b | 0003b5f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 0003b600:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b610:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b620:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b630:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b640:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b650:·3c70·7265·3e3c·636f·6465·3e0a·7061·636b··<pre><code>.pack | |||
| 0003b660:·6167·6520·2d2d·6164·643d·6169·6465·0a3c··age·--add=aide.< | |||
| 0003b670:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b680:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b690:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b6a0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b6b0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b6c0:·2223·6964·6d38·3430·3822·2074·6162·696e··"#idm8408"·tabin | |||
| 0003b6d0:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b6e0:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b6f0:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b700:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b710:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b720:·3e52·656d·6564·6961·7469·6f6e·2073·6372··>Remediation·scr | |||
| 0003b730:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b740:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b750:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b760:·7365·2220·6964·3d22·6964·6d38·3430·3822··se"·id="idm8408" | |||
| 0003b770:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b780:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b790:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b7a0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b7b0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b | 0003b7c0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | ||
| 0003b | 0003b7d0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 0003b4b0:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b | 0003b7e0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 0003b7f0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b | 0003b800:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | ||
| 0003b | 0003b810:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | ||
| 0003b4f0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b500:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b510:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b520:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b530:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b540:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b550:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b560:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b570:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b580:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b590:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b5a0:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b5b0:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b5c0:·6773·3a0a·2020·2d20·4343·452d·3930·3834··gs:.··-·CCE-9084 | |||
| 0003b5d0:·332d·340a·2020·2d20·434a·4953·2d35·2e31··3-4.··-·CJIS-5.1 | |||
| 0003b5e0:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b5f0:·5449·472d·5248·454c·2d30·392d·3635·3130··TIG-RHEL-09-6510 | |||
| 0003b600:·3130·0a20·202d·204e·4953·542d·3830·302d··10.··-·NIST-800- | |||
| 0003b610:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b620:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b630:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b640:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b650:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b660:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| Max diff block lines reached; 7588915/7621399 bytes (99.57%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 111, 14 lines modified | Offset 111, 33 lines modified | ||
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 112 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 113 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 114 | ·············_\x8c_\x8i_\x8s············6.1.1 | 114 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 115 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 117 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 119 | [[packages]] | ||
| 120 | name·=·"aide" | ||
| 121 | version·=·"*" | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·--add=aide | ||
| 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 133 | package·install·aide | ||
| 118 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 119 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 120 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 121 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 122 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 123 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 124 | ··package: | 140 | ··package: |
| Offset 134, 38 lines modified | Offset 153, 14 lines modified | ||
| 134 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 135 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 136 | ··-·low_complexity | 155 | ··-·low_complexity |
| 137 | ··-·low_disruption | 156 | ··-·low_disruption |
| 138 | ··-·medium_severity | 157 | ··-·medium_severity |
| 139 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 140 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 146 | include·install_aide | ||
| 147 | class·install_aide·{ | ||
| 148 | ··package·{·'aide': | ||
| 149 | ····ensure·=>·'installed', | ||
| 150 | ··} | ||
| 151 | } | ||
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | [[packages]] | ||
| 154 | name·=·"aide" | ||
| 155 | version·=·"*" | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | package·install·aide | ||
| 162 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 163 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 164 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 165 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 166 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 167 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 168 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 173, 21 lines modified | Offset 168, 26 lines modified | ||
| 173 | if·!·rpm·-q·--quiet·"aide"·;·then | 168 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 174 | ····dnf·install·-y·"aide" | 169 | ····dnf·install·-y·"aide" |
| 175 | fi | 170 | fi |
| 176 | else | 171 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 173 | fi |
| 179 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 180 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 181 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 182 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 183 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 179 | include·install_aide | ||
| 184 | 180 | class·install_aide·{ | |
| 181 | ··package·{·'aide': | ||
| 182 | ····ensure·=>·'installed', | ||
| 183 | ··} | ||
| 184 | } | ||
| 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 186 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 187 | $·sudo·/usr/sbin/aide·--init | 187 | $·sudo·/usr/sbin/aide·--init |
| 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 189 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 189 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 190 | To·initiate·a·manual·check,·run·the·following·command: | 190 | To·initiate·a·manual·check,·run·the·following·command: |
| 191 | $·sudo·/usr/sbin/aide·--check | 191 | $·sudo·/usr/sbin/aide·--check |
| Offset 680, 39 lines modified | Offset 680, 14 lines modified | ||
| 680 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 680 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 681 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 681 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 682 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 682 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 683 | ·············_\x8c_\x8i_\x8s······1.6.1 | 683 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 684 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 684 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 686 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 686 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 687 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 688 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 689 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 690 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 480287/486912 bytes (98.64%) of diff not shown. | |||
| Offset 14299, 16 lines modified | Offset 14299, 16 lines modified | ||
| 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037da0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037db0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dc0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037dd0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037de0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037df0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e00:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e10:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e10:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e20:·2d30·3 | 00037e20:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e30:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e40:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e50:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e60:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e70:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e80:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037e90:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15127, 236 lines modified | Offset 15127, 236 lines modified | ||
| 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | 0003b160:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | ||
| 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | 0003b170:·3036·2220·7461·6269·6e64·6578·3d22·3022··06"·tabindex="0" | ||
| 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b180:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b190:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b1a0:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b1b0:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b1c0:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b1d0:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | |||
| 0003b1e0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b1d0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b1e0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b1f0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b200:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b210:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b220:·3622·3e3c·7461·626c·6520·636c·6173·733d··6"><table·class= | |||
| 0003b230:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b240:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003b250:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003b260:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b270:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b280:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b290:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b2a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b2b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003b2c0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003b2d0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003b2e0:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003b2f0:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003b300:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003b310:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | |||
| 0003b320:·653a·2045·6e73·7572·6520·6169·6465·2069··e:·Ensure·aide·i | |||
| 0003b330:·7320·696e·7374·616c·6c65·640a·2020·7061··s·installed.··pa | |||
| 0003b340:·636b·6167·653a·0a20·2020·206e·616d·653a··ckage:.····name: | |||
| 0003b350:·2061·6964·650a·2020·2020·7374·6174·653a···aide.····state: | |||
| 0003b360:·2070·7265·7365·6e74·0a20·2077·6865·6e3a···present.··when: | |||
| 0003b370:·2061·6e73·6962·6c65·5f76·6972·7475·616c···ansible_virtual | |||
| 0003b380:·697a·6174·696f·6e5f·7479·7065·206e·6f74··ization_type·not | |||
| 0003b390:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 0003b3a0:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 0003b3b0:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 0003b3c0:·696e·6572·225d·0a20·2074·6167·733a·0a20··iner"].··tags:.· | |||
| 0003b3d0:·202d·2043·4345·2d39·3038·3433·2d34·0a20···-·CCE-90843-4.· | |||
| 0003b3e0:·202d·2043·4a49·532d·352e·3130·2e31·2e33···-·CJIS-5.10.1.3 | |||
| 0003b3f0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | |||
| 0003b400:·4845·4c2d·3039·2d36·3531·3031·300a·2020··HEL-09-651010.·· | |||
| 0003b410:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | |||
| 0003b420:·2d36·2861·290a·2020·2d20·5043·492d·4453··-6(a).··-·PCI-DS | |||
| 0003b430:·532d·5265·712d·3131·2e35·0a20·202d·2050··S-Req-11.5.··-·P | |||
| 0003b440:·4349·2d44·5353·7634·2d31·312e·352e·320a··CI-DSSv4-11.5.2. | |||
| 0003b450:·2020·2d20·656e·6162·6c65·5f73·7472·6174····-·enable_strat | |||
| 0003b460:·6567·790a·2020·2d20·6c6f·775f·636f·6d70··egy.··-·low_comp | |||
| 0003b470:·6c65·7869·7479·0a20·202d·206c·6f77·5f64··lexity.··-·low_d | |||
| 0003b480:·6973·7275·7074·696f·6e0a·2020·2d20·6d65··isruption.··-·me | |||
| 0003b490:·6469·756d·5f73·6576·6572·6974·790a·2020··dium_severity.·· | |||
| 0003b4a0:·2d20·6e6f·5f72·6562·6f6f·745f·6e65·6564··-·no_reboot_need | |||
| 0003b4b0:·6564·0a20·202d·2070·6163·6b61·6765·5f61··ed.··-·package_a | |||
| 0003b4c0:·6964·655f·696e·7374·616c·6c65·640a·3c2f··ide_installed.</ | |||
| 0003b4d0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 0003b4e0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 0003b4f0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 0003b500:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 0003b510:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 0003b520:·2369·646d·3834·3037·2220·7461·6269·6e64··#idm8407"·tabind | |||
| 0003b530:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0003b540:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0003b550:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0003b560:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0003b570:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0003b580:·5265·6d65·6469·6174·696f·6e20·5075·7070··Remediation·Pupp | |||
| 0003b590:·6574·2073·6e69·7070·6574·20e2·87b2·3c2f··et·snippet·...</ | |||
| 0003b5a0:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b5b0:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b5c0:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b5d0:·646d·3834·3037·223e·3c74·6162·6c65·2063··dm8407"><table·c | |||
| 0003b5e0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b5f0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b600:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b610:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b620:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b630:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b640:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b650:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b670:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b680:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b690:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b6a0:·6567·793a·3c2f·7468·3e3c·7464·3e65·6e61··egy:</th><td>ena | |||
| 0003b6b0:·626c·653c·2f74·643e·3c2f·7472·3e3c·2f74··ble</td></tr></t | |||
| 0003b6c0:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b6d0:·696e·636c·7564·6520·696e·7374·616c·6c5f··include·install_ | |||
| 0003b6e0:·6169·6465·0a0a·636c·6173·7320·696e·7374··aide..class·inst | |||
| 0003b6f0:·616c·6c5f·6169·6465·207b·0a20·2070·6163··all_aide·{.··pac | |||
| 0003b700:·6b61·6765·207b·2027·6169·6465·273a·0a20··kage·{·'aide':.· | |||
| 0003b710:·2020·2065·6e73·7572·6520·3d26·6774·3b20·····ensure·=>· | |||
| 0003b720:·2769·6e73·7461·6c6c·6564·272c·0a20·207d··'installed',.··} | |||
| 0003b730:·0a7d·0a3c·2f63·6f64·653e·3c2f·7072·653e··.}.</code></pre> | |||
| 0003b740:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b750:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b760:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b770:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b780:·6765·743d·2223·6964·6d38·3430·3822·2074··get="#idm8408"·t | |||
| 0003b790:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b7a0:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b7b0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b7c0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b7d0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b7e0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b7f0:·204f·5342·7569·6c64·2042·6c75·6570·7269···OSBuild·Bluepri | |||
| 0003b800:·6e74·2073·6e69·7070·6574·20e2·87b2·3c2f··nt·snippet·...</ | |||
| 0003b810:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| Max diff block lines reached; 4356111/4388595 bytes (99.26%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 106, 14 lines modified | Offset 106, 33 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 108 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 109 | ·············_\x8c_\x8i_\x8s············6.1.1 | 109 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 122 | package·--add=aide | ||
| 123 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 124 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 125 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 126 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 127 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 128 | package·install·aide | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 134 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 135 | ··package: |
| Offset 129, 38 lines modified | Offset 148, 14 lines modified | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | 148 | ··-·PCI-DSSv4-11.5.2 |
| 130 | ··-·enable_strategy | 149 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 150 | ··-·low_complexity |
| 132 | ··-·low_disruption | 151 | ··-·low_disruption |
| 133 | ··-·medium_severity | 152 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 153 | ··-·no_reboot_needed |
| 135 | ··-·package_aide_installed | 154 | ··-·package_aide_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 156 | package·install·aide | ||
| 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 162 | #·Remediation·is·applicable·only·in·certain·platforms | 160 | #·Remediation·is·applicable·only·in·certain·platforms |
| 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 161 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 168, 21 lines modified | Offset 163, 26 lines modified | ||
| 168 | if·!·rpm·-q·--quiet·"aide"·;·then | 163 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 169 | ····dnf·install·-y·"aide" | 164 | ····dnf·install·-y·"aide" |
| 170 | fi | 165 | fi |
| 171 | else | 166 | else |
| 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 173 | fi | 168 | fi |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 174 | include·install_aide | ||
| 179 | 175 | class·install_aide·{ | |
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 181 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 182 | $·sudo·/usr/sbin/aide·--init | 182 | $·sudo·/usr/sbin/aide·--init |
| 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 184 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 185 | To·initiate·a·manual·check,·run·the·following·command: | 185 | To·initiate·a·manual·check,·run·the·following·command: |
| 186 | $·sudo·/usr/sbin/aide·--check | 186 | $·sudo·/usr/sbin/aide·--check |
| Offset 675, 39 lines modified | Offset 675, 14 lines modified | ||
| 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 676 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 676 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 677 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 677 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 678 | ·············_\x8c_\x8i_\x8s······1.6.1 | 678 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 679 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 679 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 681 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 681 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 682 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 683 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 684 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 685 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 341399/348034 bytes (98.09%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15118, 237 lines modified | Offset 15118, 237 lines modified | ||
| 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003b0d0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 0003b0e0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003b0f0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003b100:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003b110:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003b120:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003b130:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003b140:·5265·6d65·6469·6174·696f·6e20·4 | 0003b140:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 0003b150:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0003b160:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b170:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b180:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b190:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 0003b1a0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b1b0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b1c0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b1d0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b1 | 0003b150:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 0003b160:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b170:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b180:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b190:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 0003b1a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003b1b0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 0003b1c0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 0003b1d0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 0003b1e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b1f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b200:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b210:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b220:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 0003b230:·3037·2220·7461·6269·6e64·6578·3d22·3022··07"·tabindex="0" | |||
| 0003b240:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b250:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b260:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b270:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b280:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b290:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2b0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b2c0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b2e0:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b300:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b310:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b360:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 0003b | 0003b370:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b380:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b390:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b3a0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b3b0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b3c0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b3d0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b3e0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 0003b3f0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 0003b400:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 0003b410:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 0003b420:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 0003b430:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 0003b440:·3d22·2369·646d·3834·3038·2220·7461·6269··="#idm8408"·tabi | |||
| 0003b450:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 0003b460:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 0003b470:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 0003b480:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 0003b490:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 0003b4a0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 0003b4b0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 0003b4c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b4d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b4e0:·7073·6522·2069·643d·2269·646d·3834·3038··pse"·id="idm8408 | |||
| 0003b4f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b500:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b510:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b520:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b530:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b540:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b | 0003b550:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 0003b230:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b | 0003b560:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 0003b570:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b | 0003b580:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 0003b260:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b270:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b280:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b290:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 0003b2a0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 0003b2b0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 0003b2c0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 0003b2d0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 0003b2e0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 0003b2f0:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 0003b300:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 0003b310:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 0003b320:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 0003b330:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 0003b340:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 0003b350:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 0003b360:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 0003b370:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 0003b380:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| 0003b390:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 0003b3a0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 0003b3b0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 0003b3c0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 0003b3d0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 0003b3e0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| Max diff block lines reached; 4055020/4087504 bytes (99.21%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·1·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 105, 14 lines modified | Offset 105, 33 lines modified | ||
| 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 105 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 106 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 107 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 108 | ·············_\x8c_\x8i_\x8s············6.1.1 | 108 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 110 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 111 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 113 | [[packages]] | ||
| 114 | name·=·"aide" | ||
| 115 | version·=·"*" | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | package·--add=aide | ||
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 127 | package·install·aide | ||
| 112 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 128 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 113 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 129 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 114 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 130 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 115 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 131 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 116 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 132 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 117 | -·name:·Ensure·aide·is·installed | 133 | -·name:·Ensure·aide·is·installed |
| 118 | ··package: | 134 | ··package: |
| Offset 128, 38 lines modified | Offset 147, 14 lines modified | ||
| 128 | ··-·PCI-DSSv4-11.5.2 | 147 | ··-·PCI-DSSv4-11.5.2 |
| 129 | ··-·enable_strategy | 148 | ··-·enable_strategy |
| 130 | ··-·low_complexity | 149 | ··-·low_complexity |
| 131 | ··-·low_disruption | 150 | ··-·low_disruption |
| 132 | ··-·medium_severity | 151 | ··-·medium_severity |
| 133 | ··-·no_reboot_needed | 152 | ··-·no_reboot_needed |
| 134 | ··-·package_aide_installed | 153 | ··-·package_aide_installed |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 140 | include·install_aide | ||
| 141 | class·install_aide·{ | ||
| 142 | ··package·{·'aide': | ||
| 143 | ····ensure·=>·'installed', | ||
| 144 | ··} | ||
| 145 | } | ||
| 146 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 147 | [[packages]] | ||
| 148 | name·=·"aide" | ||
| 149 | version·=·"*" | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 151 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 152 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 153 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 154 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 155 | package·install·aide | ||
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 161 | #·Remediation·is·applicable·only·in·certain·platforms | 159 | #·Remediation·is·applicable·only·in·certain·platforms |
| 162 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 160 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 167, 21 lines modified | Offset 162, 26 lines modified | ||
| 167 | if·!·rpm·-q·--quiet·"aide"·;·then | 162 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 168 | ····dnf·install·-y·"aide" | 163 | ····dnf·install·-y·"aide" |
| 169 | fi | 164 | fi |
| 170 | else | 165 | else |
| 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 172 | fi | 167 | fi |
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | include·install_aide | ||
| 178 | 174 | class·install_aide·{ | |
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/sbin/aide·--init | 181 | $·sudo·/usr/sbin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 183 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 184 | To·initiate·a·manual·check,·run·the·following·command: | 184 | To·initiate·a·manual·check,·run·the·following·command: |
| 185 | $·sudo·/usr/sbin/aide·--check | 185 | $·sudo·/usr/sbin/aide·--check |
| Offset 674, 39 lines modified | Offset 674, 14 lines modified | ||
| 674 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 674 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 675 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 675 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 676 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 676 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 677 | ·············_\x8c_\x8i_\x8s······1.6.1 | 677 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 678 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 678 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 679 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 679 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 680 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 681 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 682 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 683 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 684 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 311846/318417 bytes (97.94%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037dc0:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037dd0:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037de0:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037df0:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e00:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e10:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e20:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e30:·3230·323 | 00037e30:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037e40:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037e50:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037e60:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037e70:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037e80:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037e90:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037ea0:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 15150, 236 lines modified | Offset 15150, 236 lines modified | ||
| 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | 0003b2d0:·2d74·6172·6765·743d·2223·6964·6d38·3430··-target="#idm840 | ||
| 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | 0003b2e0:·3622·2074·6162·696e·6465·783d·2230·2220··6"·tabindex="0"· | ||
| 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b2f0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b300:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b310:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b320:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b330:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b340:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | |||
| 0003b350:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b340:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b350:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b360:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b370:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b380:·7073·6522·2069·643d·2269·646d·3834·3036··pse"·id="idm8406 | |||
| 0003b390:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b3a0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b3b0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b3c0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b3d0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b3e0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b3f0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b400:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b410:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b420:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b430:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b440:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b450:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 0003b460:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b470:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b480:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b490:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b4a0:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b4b0:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b4c0:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b4d0:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b4e0:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b4f0:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b500:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b510:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b520:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b530:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b540:·2d20·4343·452d·3930·3834·332d·340a·2020··-·CCE-90843-4.·· | |||
| 0003b550:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b560:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 0003b570:·454c·2d30·392d·3635·3130·3130·0a20·202d··EL-09-651010.··- | |||
| 0003b580:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b590:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b5a0:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b5b0:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b5c0:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b5d0:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b5e0:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b5f0:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b600:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b610:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b620:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b630:·6465·5f69·6e73·7461·6c6c·6564·0a3c·2f63··de_installed.</c | |||
| 0003b640:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0003b650:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0003b660:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0003b670:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0003b680:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0003b690:·6964·6d38·3430·3722·2074·6162·696e·6465··idm8407"·tabinde | |||
| 0003b6a0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 0003b6b0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 0003b6c0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 0003b6d0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 0003b6e0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 0003b6f0:·656d·6564·6961·7469·6f6e·2050·7570·7065··emediation·Puppe | |||
| 0003b700:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b710:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b720:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b730:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b740:·6d38·3430·3722·3e3c·7461·626c·6520·636c··m8407"><table·cl | |||
| 0003b750:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b760:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b770:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b780:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b790:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b7a0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b7b0:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b7c0:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b7d0:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b7e0:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b7f0:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b800:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b810:·6779·3a3c·2f74·683e·3c74·643e·656e·6162··gy:</th><td>enab | |||
| 0003b820:·6c65·3c2f·7464·3e3c·2f74·723e·3c2f·7461··le</td></tr></ta | |||
| 0003b830:·626c·653e·3c70·7265·3e3c·636f·6465·3e69··ble><pre><code>i | |||
| 0003b840:·6e63·6c75·6465·2069·6e73·7461·6c6c·5f61··nclude·install_a | |||
| 0003b850:·6964·650a·0a63·6c61·7373·2069·6e73·7461··ide..class·insta | |||
| 0003b860:·6c6c·5f61·6964·6520·7b0a·2020·7061·636b··ll_aide·{.··pack | |||
| 0003b870:·6167·6520·7b20·2761·6964·6527·3a0a·2020··age·{·'aide':.·· | |||
| 0003b880:·2020·656e·7375·7265·203d·2667·743b·2027····ensure·=>·' | |||
| 0003b890:·696e·7374·616c·6c65·6427·2c0a·2020·7d0a··installed',.··}. | |||
| 0003b8a0:·7d0a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··}.</code></pre>< | |||
| 0003b8b0:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b8c0:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b8d0:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b8e0:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b8f0:·6574·3d22·2369·646d·3834·3038·2220·7461··et="#idm8408"·ta | |||
| 0003b900:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b910:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b920:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b930:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b940:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b950:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b960:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | |||
| 0003b970:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0003b980:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b990:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| Max diff block lines reached; 7443345/7475691 bytes (99.57%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·Red·Hat·Enterprise·Linux·9·Benchmark·for·Level·2·- |
| 43 | ··············Workstation | 43 | ··············Workstation |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 110, 14 lines modified | Offset 110, 33 lines modified | ||
| 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 110 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 111 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 112 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 113 | ·············_\x8c_\x8i_\x8s············6.1.1 | 113 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 118 | [[packages]] | ||
| 119 | name·=·"aide" | ||
| 120 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 126 | package·--add=aide | ||
| 127 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 128 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 129 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 130 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 131 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 132 | package·install·aide | ||
| 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 122 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 123 | ··package: | 139 | ··package: |
| Offset 133, 38 lines modified | Offset 152, 14 lines modified | ||
| 133 | ··-·PCI-DSSv4-11.5.2 | 152 | ··-·PCI-DSSv4-11.5.2 |
| 134 | ··-·enable_strategy | 153 | ··-·enable_strategy |
| 135 | ··-·low_complexity | 154 | ··-·low_complexity |
| 136 | ··-·low_disruption | 155 | ··-·low_disruption |
| 137 | ··-·medium_severity | 156 | ··-·medium_severity |
| 138 | ··-·no_reboot_needed | 157 | ··-·no_reboot_needed |
| 139 | ··-·package_aide_installed | 158 | ··-·package_aide_installed |
| 140 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 141 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 142 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 143 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 144 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 145 | include·install_aide | ||
| 146 | class·install_aide·{ | ||
| 147 | ··package·{·'aide': | ||
| 148 | ····ensure·=>·'installed', | ||
| 149 | ··} | ||
| 150 | } | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 152 | [[packages]] | ||
| 153 | name·=·"aide" | ||
| 154 | version·=·"*" | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | package·install·aide | ||
| 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 166 | #·Remediation·is·applicable·only·in·certain·platforms | 164 | #·Remediation·is·applicable·only·in·certain·platforms |
| 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 172, 21 lines modified | Offset 167, 26 lines modified | ||
| 172 | if·!·rpm·-q·--quiet·"aide"·;·then | 167 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 173 | ····dnf·install·-y·"aide" | 168 | ····dnf·install·-y·"aide" |
| 174 | fi | 169 | fi |
| 175 | else | 170 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 171 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 172 | fi |
| 178 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 179 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 180 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 181 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 182 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | include·install_aide | ||
| 183 | 179 | class·install_aide·{ | |
| 180 | ··package·{·'aide': | ||
| 181 | ····ensure·=>·'installed', | ||
| 182 | ··} | ||
| 183 | } | ||
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 185 | Run·the·following·command·to·generate·a·new·database: | 185 | Run·the·following·command·to·generate·a·new·database: |
| 186 | $·sudo·/usr/sbin/aide·--init | 186 | $·sudo·/usr/sbin/aide·--init |
| 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 188 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 189 | To·initiate·a·manual·check,·run·the·following·command: | 189 | To·initiate·a·manual·check,·run·the·following·command: |
| 190 | $·sudo·/usr/sbin/aide·--check | 190 | $·sudo·/usr/sbin/aide·--check |
| Offset 679, 39 lines modified | Offset 679, 14 lines modified | ||
| 679 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 679 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 680 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 680 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 681 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 681 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 682 | ·············_\x8c_\x8i_\x8s······1.6.1 | 682 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 683 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 683 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 684 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 684 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 685 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 686 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 687 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 688 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 689 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 463546/470117 bytes (98.60%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037fe0:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037ff0:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00038000:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00038010:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00038020:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00038030:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00038040:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00038050:·206f·6620·3230·323 | 00038050:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038060:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00038070:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00038080:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00038090:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 000380a0:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 000380b0:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 000380c0:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15614, 267 lines modified | Offset 15614, 267 lines modified | ||
| 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0003cfd0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | 0003cfe0:·2369·646d·3839·3836·2220·7461·6269·6e64··#idm8986"·tabind | ||
| 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 0003cff0:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 0003d000:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 0003d010:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 0003d020:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 0003d030:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 0003d040:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | |||
| 0003d050:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | |||
| 0003d060:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003d070:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003d080:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003d090:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | |||
| 0003d0a0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 0003d0b0:·6375·7374·6f6d·697a·6174·696f·6e73·5d0a··customizations]. | |||
| 0003d0c0:·6669·7073·203d·2074·7275·650a·3c2f·636f··fips·=·true.</co | |||
| 0003d0d0:·6465·3e3c·2f70·7265·3e3c·2f64·6976·3e3c··de></pre></div>< | |||
| 0003d0e0:·6120·636c·6173·733d·2262·746e·2062·746e··a·class="btn·btn | |||
| 0003d0f0:·2d73·7563·6365·7373·2220·6461·7461·2d74··-success"·data-t | |||
| 0003d100:·6f67·676c·653d·2263·6f6c·6c61·7073·6522··oggle="collapse" | |||
| 0003d110:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | |||
| 0003d120:·646d·3839·3837·2220·7461·6269·6e64·6578··dm8987"·tabindex | |||
| 0003d130:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | |||
| 0003d140:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | |||
| 0003d150:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | |||
| 0003d160:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | |||
| 0003d170:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | |||
| 0003d | 0003d180:·6d65·6469·6174·696f·6e20·416e·7369·626c··mediation·Ansibl | ||
| 0003d | 0003d190:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | ||
| 0003d | 0003d1a0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | ||
| 0003d | 0003d1b0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | ||
| 0003d | 0003d1c0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | ||
| 0003d | 0003d1d0:·6d38·3938·3722·3e3c·7461·626c·6520·636c··m8987"><table·cl | ||
| 0003d | 0003d1e0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | ||
| 0003d | 0003d1f0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | ||
| 0003d | 0003d200:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | ||
| 0003d | 0003d210:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | ||
| 0003d | 0003d220:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | ||
| 0003d | 0003d230:·3e3c·7464·3e6d·6564·6975·6d3c·2f74·643e··><td>medium</td> | ||
| 0003d240:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0003d250:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0003d260:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | |||
| 0003d270:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003d280:·3c2f·7468·3e3c·7464·3e74·7275·653c·2f74··</th><td>true</t | |||
| 0003d | 0003d290:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003d110:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003d120:·7464·3e6d·6564·6975·6d3c·2f74·643e·3c2f··td>medium</td></ | |||
| 0003d130:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003d140:·743a·3c2f·7468·3e3c·7464·3e74·7275·653c··t:</th><td>true< | |||
| 0003d150:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003d | 0003d2a0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | ||
| 0003d | 0003d2b0:·3e72·6573·7472·6963·743c·2f74·643e·3c2f··>restrict</td></ | ||
| 0003d | 0003d2c0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | ||
| 0003d | 0003d2d0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·5843··<code>-·name:·XC | ||
| 0003d | 0003d2e0:·4344·4620·5661·6c75·6520·7661·725f·7379··CDF·Value·var_sy | ||
| 0003d | 0003d2f0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 0003d | 0003d300:·6379·2023·2070·726f·6d6f·7465·2074·6f20··cy·#·promote·to· | ||
| 0003d | 0003d310:·7661·7269·6162·6c65·0a20·2073·6574·5f66··variable.··set_f | ||
| 0003d | 0003d320:·6163·743a·0a20·2020·2076·6172·5f73·7973··act:.····var_sys | ||
| 0003d | 0003d330:·7465·6d5f·6372·7970·746f·5f70·6f6c·6963··tem_crypto_polic | ||
| 0003d | 0003d340:·793a·2021·2173·7472·203c·6162·6272·2074··y:·!!str·<abbr·t | ||
| 0003d | 0003d350:·6974·6c65·3d22·6672·6f6d·2050·726f·6669··itle="from·Profi | ||
| 0003d | 0003d360:·6c65·2f72·6566·696e·652d·7661·6c75·653a··le/refine-value: | ||
| 0003d | 0003d370:·2078·6363·6466·5f6f·7267·2e73·7367·7072···xccdf_org.ssgpr | ||
| 0003d | 0003d380:·6f6a·6563·742e·636f·6e74·656e·745f·7661··oject.content_va | ||
| 0003d | 0003d390:·6c75·655f·7661·725f·7379·7374·656d·5f63··lue_var_system_c | ||
| 0003d | 0003d3a0:·7279·7074·6f5f·706f·6c69·6379·223e·4649··rypto_policy">FI | ||
| 0003d | 0003d3b0:·5053·3c2f·6162·6272·3e0a·2020·7461·6773··PS</abbr>.··tags | ||
| 0003d | 0003d3c0:·3a0a·2020·2020·2d20·616c·7761·7973·0a0a··:.····-·always.. | ||
| 0003d | 0003d3d0:·2d20·6e61·6d65·3a20·456e·6162·6c65·2046··-·name:·Enable·F | ||
| 0003d | 0003d3e0:·4950·5320·4d6f·6465·202d·2043·6865·636b··IPS·Mode·-·Check | ||
| 0003d | 0003d3f0:·2074·6f20·5365·6520·7468·6520·4375·7272···to·See·the·Curr | ||
| 0003d | 0003d400:·656e·7420·5374·6174·7573·206f·6620·4649··ent·Status·of·FI | ||
| 0003d | 0003d410:·5053·204d·6f64·650a·2020·616e·7369·626c··PS·Mode.··ansibl | ||
| 0003d | 0003d420:·652e·6275·696c·7469·6e2e·636f·6d6d·616e··e.builtin.comman | ||
| 0003d | 0003d430:·643a·202f·7573·722f·6269·6e2f·6669·7073··d:·/usr/bin/fips | ||
| 0003d | 0003d440:·2d6d·6f64·652d·7365·7475·7020·2d2d·6368··-mode-setup·--ch | ||
| 0003d | 0003d450:·6563·6b0a·2020·7265·6769·7374·6572·3a20··eck.··register:· | ||
| 0003d | 0003d460:·6973·5f66·6970·735f·656e·6162·6c65·640a··is_fips_enabled. | ||
| 0003d | 0003d470:·2020·6661·696c·6564·5f77·6865·6e3a·2066····failed_when:·f | ||
| 0003d | 0003d480:·616c·7365·0a20·2063·6861·6e67·6564·5f77··alse.··changed_w | ||
| 0003d | 0003d490:·6865·6e3a·2066·616c·7365·0a20·2077·6865··hen:·false.··whe | ||
| 0003d | 0003d4a0:·6e3a·0a20·202d·2028·2061·6e73·6962·6c65··n:.··-·(·ansible | ||
| 0003d | 0003d4b0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | ||
| 0003d | 0003d4c0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | ||
| 0003d | 0003d4d0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | ||
| 0003d | 0003d4e0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | ||
| 0003d | 0003d4f0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | ||
| 0003d | 0003d500:·2020·2061·6e64·206e·6f74·2028·206c·6f6f·····and·not·(·loo | ||
| 0003d | 0003d510:·6b75·7028·2265·6e76·222c·2022·636f·6e74··kup("env",·"cont | ||
| 0003d | 0003d520:·6169·6e65·7222·2920·3d3d·2022·6277·7261··ainer")·==·"bwra | ||
| 0003d | 0003d530:·702d·6f73·6275·696c·6422·2029·2029·0a20··p-osbuild"·)·).· | ||
| 0003d | 0003d540:·202d·2061·6e73·6962·6c65·5f76·6972·7475···-·ansible_virtu | ||
| 0003d | 0003d550:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | ||
| 0003d | 0003d560:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | ||
| 0003d | 0003d570:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | ||
| 0003d | 0003d580:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | ||
| 0003d | 0003d590:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | ||
| 0003d | 0003d5a0:·0a20·202d·2043·4345·2d38·3837·3432·2d32··.··-·CCE-88742-2 | ||
| 0003d | 0003d5b0:·0a20·202d·2044·4953·412d·5354·4947·2d52··.··-·DISA-STIG-R | ||
| 0003d | 0003d5c0:·4845·4c2d·3039·2d36·3731·3031·300a·2020··HEL-09-671010.·· | ||
| 0003d | 0003d5d0:·2d20·4e49·5354·2d38·3030·2d35·332d·434d··-·NIST-800-53-CM | ||
| 0003d | 0003d5e0:·2d33·2836·290a·2020·2d20·4e49·5354·2d38··-3(6).··-·NIST-8 | ||
| 0003d | 0003d5f0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | ||
| 0003d | 0003d600:·2d20·4e49·5354·2d38·3030·2d35·332d·4941··-·NIST-800-53-IA | ||
| 0003d | 0003d610:·2d37·0a20·202d·204e·4953·542d·3830·302d··-7.··-·NIST-800- | ||
| 0003d | 0003d620:·3533·2d53·432d·3132·0a20·202d·204e·4953··53-SC-12.··-·NIS | ||
| 0003d630:·542d·3830·302d·3533·2d53·432d·3132·2832··T-800-53-SC-12(2 | |||
| 0003d640:·290a·2020·2d20·4e49·5354·2d38·3030·2d35··).··-·NIST-800-5 | |||
| 0003d650:·332d·5343·2d31·3228·3329·0a20·202d·204e··3-SC-12(3).··-·N | |||
| 0003d | 0003d660:·4953·542d·3830·302d·3533·2d53·432d·3133··IST-800-53-SC-13 | ||
| Max diff block lines reached; 3692150/3728774 bytes (99.02%) of diff not shown. | |||
| Offset 50, 15 lines modified | Offset 50, 15 lines modified | ||
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·Unclassified·Information·in·Non-federal·Information |
| 51 | ··············Systems·and·Organizations·(NIST·800-171) | 51 | ··············Systems·and·Organizations·(NIST·800-171) |
| 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui | 52 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cui |
| 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 53 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 54 | ····*·cpe:/o:redhat:enterprise_linux:9 | 54 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 55 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 56 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 57 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 58 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 59 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 60 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 61 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 64 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 208, 14 lines modified | Offset 208, 18 lines modified | ||
| 208 | ·············_\x8i_\x8s_\x8m······1446 | 208 | ·············_\x8i_\x8s_\x8m······1446 |
| 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 209 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 210 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 211 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 212 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 213 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 214 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 216 | [customizations] | ||
| 217 | fips·=·true | ||
| 215 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 218 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 216 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 219 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 217 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 220 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 218 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 221 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 219 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 222 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 220 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 223 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 221 | ··set_fact: | 224 | ··set_fact: |
| Offset 319, 18 lines modified | Offset 323, 14 lines modified | ||
| 319 | ··-·NIST-800-53-SC-13 | 323 | ··-·NIST-800-53-SC-13 |
| 320 | ··-·enable_fips_mode | 324 | ··-·enable_fips_mode |
| 321 | ··-·high_severity | 325 | ··-·high_severity |
| 322 | ··-·medium_complexity | 326 | ··-·medium_complexity |
| 323 | ··-·medium_disruption | 327 | ··-·medium_disruption |
| 324 | ··-·reboot_required | 328 | ··-·reboot_required |
| 325 | ··-·restrict_strategy | 329 | ··-·restrict_strategy |
| 326 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 327 | [customizations] | ||
| 328 | fips·=·true | ||
| 329 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 330 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 330 | #·Remediation·is·applicable·only·in·certain·platforms | 331 | #·Remediation·is·applicable·only·in·certain·platforms |
| 331 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 332 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 332 | var_system_crypto_policy='FIPS' | 333 | var_system_crypto_policy='FIPS' |
| Offset 371, 14 lines modified | Offset 371, 33 lines modified | ||
| 371 | Severity: ···medium | 371 | Severity: ···medium |
| 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 372 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 373 | Identifiers:·CCE-83442-4 | 373 | Identifiers:·CCE-83442-4 |
| 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 374 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 375 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 376 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 377 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 379 | [[packages]] | ||
| 380 | name·=·"crypto-policies" | ||
| 381 | version·=·"*" | ||
| 382 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 383 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 384 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 385 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 386 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 387 | package·--add=crypto-policies | ||
| 388 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 389 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 390 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 391 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 392 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 393 | package·install·crypto-policies | ||
| 378 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 379 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 380 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 381 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 382 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 383 | -·name:·Ensure·crypto-policies·is·installed | 399 | -·name:·Ensure·crypto-policies·is·installed |
| 384 | ··package: | 400 | ··package: |
| Offset 389, 54 lines modified | Offset 408, 35 lines modified | ||
| 389 | ··-·DISA-STIG-RHEL-09-672010 | 408 | ··-·DISA-STIG-RHEL-09-672010 |
| 390 | ··-·enable_strategy | 409 | ··-·enable_strategy |
| 391 | ··-·low_complexity | 410 | ··-·low_complexity |
| 392 | ··-·low_disruption | 411 | ··-·low_disruption |
| 393 | ··-·medium_severity | 412 | ··-·medium_severity |
| 394 | ··-·no_reboot_needed | 413 | ··-·no_reboot_needed |
| 395 | ··-·package_crypto-policies_installed | 414 | ··-·package_crypto-policies_installed |
| 396 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 397 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 398 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 399 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 400 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 401 | include·install_crypto-policies | ||
| 402 | class·install_crypto-policies·{ | ||
| 403 | ··package·{·'crypto-policies': | ||
| 404 | ····ensure·=>·'installed', | ||
| 405 | ··} | ||
| 406 | } | ||
| 407 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 408 | [[packages]] | ||
| 409 | name·=·"crypto-policies" | ||
| 410 | version·=·"*" | ||
| 411 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 412 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 413 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 414 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 415 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 416 | package·install·crypto-policies | ||
| 417 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 415 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 418 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 416 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 419 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 417 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 420 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 418 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 421 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 419 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 422 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 420 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 423 | ····dnf·install·-y·"crypto-policies" | 421 | ····dnf·install·-y·"crypto-policies" |
| Max diff block lines reached; 389650/395361 bytes (98.56%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | 00037dc0:·793c·2f68·323e·3c70·3e43·7572·7265·6e74··y</h2><p>Current | ||
| 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | 00037dd0:·2076·6572·7369·6f6e·3a20·3c73·7472·6f6e···version:·<stron | ||
| 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | 00037de0:·673e·302e·312e·3734·3c2f·7374·726f·6e67··g>0.1.74</strong | ||
| 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | 00037df0:·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c·7374··></p><ul><li><st | ||
| 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | 00037e00:·726f·6e67·3e64·7261·6674·3c2f·7374·726f··rong>draft</stro | ||
| 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | 00037e10:·6e67·3e0a·2020·2020·2020·2020·2020·2020··ng>.············ | ||
| 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | 00037e20:·2020·2020·2020·2020·2861·7320·6f66·2032··········(as·of·2 | ||
| 00037e30:·3032·3 | 00037e30:·3032·352d·3031·2d32·3329·0a20·2020·2020··025-01-23).····· | ||
| 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | 00037e40:·2020·2020·2020·2020·2020·203c·2f6c·693e·············</li> | ||
| 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | 00037e50:·3c2f·756c·3e3c·2f64·6976·3e3c·6832·3e54··</ul></div><h2>T | ||
| 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | 00037e60:·6162·6c65·206f·6620·436f·6e74·656e·7473··able·of·Contents | ||
| 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | 00037e70:·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c·6120··</h2><ol><li><a· | ||
| 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | 00037e80:·6872·6566·3d22·2378·6363·6466·5f6f·7267··href="#xccdf_org | ||
| 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | 00037e90:·2e73·7367·7072·6f6a·6563·742e·636f·6e74··.ssgproject.cont | ||
| 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | 00037ea0:·656e·745f·6772·6f75·705f·7379·7374·656d··ent_group_system | ||
| Offset 17333, 252 lines modified | Offset 17333, 252 lines modified | ||
| 00043b40:·7461·7267·6574·3d22·2369·646d·3932·3030··target="#idm9200 | 00043b40:·7461·7267·6574·3d22·2369·646d·3932·3030··target="#idm9200 | ||
| 00043b50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00043b50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00043b60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00043b60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00043b70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00043b70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00043b80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00043b80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00043b90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00043b90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 00043ba0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 00043ba0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 00043bb0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 00043bc0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00043bd0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00043be0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00043bf0:·7365·2220·6964·3d22·6964·6d39·3230·3022··se"·id="idm9200" | |||
| 00043c00:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 00043c10:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00043bb0:·696f·6e20·4b75·6265·726e·6574·6573·2073··ion·Kubernetes·s | |||
| 00043bc0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00043bd0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00043be0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00043bf0:·6c61·7073·6522·2069·643d·2269·646d·3932··lapse"·id="idm92 | |||
| 00043c00:·3030·223e·3c74·6162·6c65·2063·6c61·7373··00"><table·class | |||
| 00043c10:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00043c20:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00043c | 00043c20:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 00043c30:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00043c40:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00043c50:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00043c40:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00043c50:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00043c60:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00043c70:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00043c80:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00043c | 00043c60:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00043c | 00043c70:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | ||
| 00043c80:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00043c90:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 00043ca0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 00043cb0:·7 | 00043cb0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 00043cc0:· | 00043cc0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 00043cd0:· | 00043cd0:·683e·3c74·643e·7265·7374·7269·6374·3c2f··h><td>restrict</ | ||
| 00043ce0:· | 00043ce0:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | ||
| 00043cf0:·653e·3c70·7265·3e3c·636f·6465·3e2d·2d2d··e><pre><code>--- | |||
| 00043d00:·0a61·7069·5665·7273·696f·6e3a·206d·6163··.apiVersion:·mac | |||
| 00043d10:·6869·6e65·636f·6e66·6967·7572·6174·696f··hineconfiguratio | |||
| 00043d20:·6e2e·6f70·656e·7368·6966·742e·696f·2f76··n.openshift.io/v | |||
| 00043d30:·310a·6b69·6e64·3a20·4d61·6368·696e·6543··1.kind:·MachineC | |||
| 00043d40:·6f6e·6669·670a·7370·6563·3a0a·2020·636f··onfig.spec:.··co | |||
| 00043d50:·6e66·6967·3a0a·2020·2020·6967·6e69·7469··nfig:.····igniti | |||
| 00043d60:·6f6e·3a0a·2020·2020·2020·7665·7273·696f··on:.······versio | |||
| 00043d70:·6e3a·2033·2e31·2e30·0a20·2020·2073·7973··n:·3.1.0.····sys | |||
| 00043d80:·7465·6d64·3a0a·2020·2020·2020·756e·6974··temd:.······unit | |||
| 00043d90:·733a·0a20·2020·2020·2020·202d·206e·616d··s:.········-·nam | |||
| 00043da0:·653a·2063·6f6e·6669·6775·7265·2d63·7279··e:·configure-cry | |||
| 00043db0:·7074·6f2d·706f·6c69·6379·2e73·6572·7669··pto-policy.servi | |||
| 00043dc0:·6365·0a20·2020·2020·2020·2020·2065·6e61··ce.··········ena | |||
| 00043dd0:·626c·6564·3a20·7472·7565·0a20·2020·2020··bled:·true.····· | |||
| 00043de0:·2020·2020·2063·6f6e·7465·6e74·733a·207c·······contents:·| | |||
| 00043df0:·0a20·2020·2020·2020·2020·2020·205b·556e··.············[Un | |||
| 00043e00:·6974·5d0a·2020·2020·2020·2020·2020·2020··it].············ | |||
| 00043e10:·4265·666f·7265·3d6b·7562·656c·6574·2e73··Before=kubelet.s | |||
| 00043e20:·6572·7669·6365·0a20·2020·2020·2020·2020··ervice.········· | |||
| 00043e30:·2020·205b·5365·7276·6963·655d·0a20·2020·····[Service].··· | |||
| 00043e40:·2020·2020·2020·2020·2054·7970·653d·6f6e···········Type=on | |||
| 00043e50:·6573·686f·740a·2020·2020·2020·2020·2020··eshot.·········· | |||
| 00043e60:·2020·4578·6563·5374·6172·743d·7570·6461····ExecStart=upda | |||
| 00043e70:·7465·2d63·7279·7074·6f2d·706f·6c69·6369··te-crypto-polici | |||
| 00043e80:·6573·202d·2d73·6574·207b·7b2e·7661·725f··es·--set·{{.var_ | |||
| 00043e90:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 00043ea0:·6c69·6379·7d7d·0a20·2020·2020·2020·2020··licy}}.········· | |||
| 00043eb0:·2020·2052·656d·6169·6e41·6674·6572·4578·····RemainAfterEx | |||
| 00043ec0:·6974·3d79·6573·0a20·2020·2020·2020·2020··it=yes.········· | |||
| 00043ed0:·2020·205b·496e·7374·616c·6c5d·0a20·2020·····[Install].··· | |||
| 00043ee0:·2020·2020·2020·2020·2057·616e·7465·6442···········WantedB | |||
| 00043ef0:·793d·6d75·6c74·692d·7573·6572·2e74·6172··y=multi-user.tar | |||
| 00043f00:·6765·740a·3c2f·636f·6465·3e3c·2f70·7265··get.</code></pre | |||
| 00043f10:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00043f20:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00043f30:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00043f40:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00043f50:·7267·6574·3d22·2369·646d·3932·3031·2220··rget="#idm9201"· | |||
| 00043f60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00043f70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00043f80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00043f90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00043fa0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00043fb0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00043fc0:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | |||
| 00043fd0:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00043fe0:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 00043ff0:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00044000:·2220·6964·3d22·6964·6d39·3230·3122·3e3c··"·id="idm9201">< | |||
| 00044010:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 00044020:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 00044030:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 00044040:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 00044050:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 00044060:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 00044070:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 00044080:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 00044090:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 000440a0:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 000440b0:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 000440c0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 000440d0:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 000440e0:·3c74·643e·7265·7374·7269·6374·3c2f·7464··<td>restrict</td | |||
| 000440f0:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0004 | 00043cf0:·3c70·7265·3e3c·636f·6465·3e2d·206e·616d··<pre><code>-·nam | ||
| 0004 | 00043d00:·653a·2058·4343·4446·2056·616c·7565·2076··e:·XCCDF·Value·v | ||
| 0004 | 00043d10:·6172·5f73·7973·7465·6d5f·6372·7970·746f··ar_system_crypto | ||
| 0004 | 00043d20:·5f70·6f6c·6963·7920·2320·7072·6f6d·6f74··_policy·#·promot | ||
| 0004 | 00043d30:·6520·746f·2076·6172·6961·626c·650a·2020··e·to·variable.·· | ||
| 0004 | 00043d40:·7365·745f·6661·6374·3a0a·2020·2020·7661··set_fact:.····va | ||
| Max diff block lines reached; 2743744/2778298 bytes (98.76%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·Essential·Eight |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_e8 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 572, 39 lines modified | Offset 572, 14 lines modified | ||
| 572 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 572 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 573 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 573 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 574 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 574 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 575 | ·············_\x8c_\x8i_\x8s······1.6.1 | 575 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 576 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 576 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 577 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 577 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 578 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 578 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 584 | --- | ||
| 585 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 586 | kind:·MachineConfig | ||
| 587 | spec: | ||
| 588 | ··config: | ||
| 589 | ····ignition: | ||
| 590 | ······version:·3.1.0 | ||
| 591 | ····systemd: | ||
| 592 | ······units: | ||
| 593 | ········-·name:·configure-crypto-policy.service | ||
| 594 | ··········enabled:·true | ||
| 595 | ··········contents:·| | ||
| 596 | ············[Unit] | ||
| 597 | ············Before=kubelet.service | ||
| 598 | ············[Service] | ||
| 599 | ············Type=oneshot | ||
| 600 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 601 | ············RemainAfterExit=yes | ||
| 602 | ············[Install] | ||
| 603 | ············WantedBy=multi-user.target | ||
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 579 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 580 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 581 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 582 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 583 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 609 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 584 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 610 | ··set_fact: | 585 | ··set_fact: |
| Offset 674, 14 lines modified | Offset 649, 39 lines modified | ||
| 674 | » echo·"to·see·what·package·to·(re)install"·>&2 | 649 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 675 | » false··#·end·with·an·error·code | 650 | » false··#·end·with·an·error·code |
| 676 | elif·test·"$rc"·!=·0;·then | 651 | elif·test·"$rc"·!=·0;·then |
| 677 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 652 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 678 | » false··#·end·with·an·error·code | 653 | » false··#·end·with·an·error·code |
| 679 | fi | 654 | fi |
| 655 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 656 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 657 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 658 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 659 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 660 | --- | ||
| 661 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 662 | kind:·MachineConfig | ||
| 663 | spec: | ||
| 664 | ··config: | ||
| 665 | ····ignition: | ||
| 666 | ······version:·3.1.0 | ||
| 667 | ····systemd: | ||
| 668 | ······units: | ||
| 669 | ········-·name:·configure-crypto-policy.service | ||
| 670 | ··········enabled:·true | ||
| 671 | ··········contents:·| | ||
| 672 | ············[Unit] | ||
| 673 | ············Before=kubelet.service | ||
| 674 | ············[Service] | ||
| 675 | ············Type=oneshot | ||
| 676 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 677 | ············RemainAfterExit=yes | ||
| 678 | ············[Install] | ||
| 679 | ············WantedBy=multi-user.target | ||
| 680 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 680 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 681 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 681 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 682 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 682 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 683 | Severity: ···medium | 683 | Severity: ···medium |
| 684 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 684 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 685 | Identifiers:·CCE-83445-7 | 685 | Identifiers:·CCE-83445-7 |
| 686 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 686 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1033, 14 lines modified | Offset 1033, 33 lines modified | ||
| 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1033 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·r\x8re\x8ea\x8ar\x8r·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1034 | The·rear·package·can·be·installed·with·the·following·command: | 1034 | The·rear·package·can·be·installed·with·the·following·command: |
| 1035 | $·sudo·dnf·install·rear | 1035 | $·sudo·dnf·install·rear |
| 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. | 1036 | Rationale:···rear·contains·the·Relax-and-Recover·(ReaR)·utility.·ReaR·produces·a·bootable·image·of·a·system·and·restores·from·backup·using·this·image. |
| 1037 | Severity: ···medium | 1037 | Severity: ···medium |
| 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed | 1038 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_rear_installed |
| 1039 | Identifiers:·CCE-83503-3 | 1039 | Identifiers:·CCE-83503-3 |
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1041 | [[packages]] | ||
| 1042 | name·=·"rear" | ||
| 1043 | version·=·"*" | ||
| 1044 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1045 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1046 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1047 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1048 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1049 | package·--add=rear | ||
| 1050 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1051 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1052 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1053 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1054 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1055 | package·install·rear | ||
| 1040 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1056 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1041 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1057 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1042 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1058 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1043 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1059 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1044 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1060 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| Max diff block lines reached; 172574/178787 bytes (96.52%) of diff not shown. | |||
| Offset 14320, 16 lines modified | Offset 14320, 16 lines modified | ||
| 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037ef0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037f00:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037f10:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037f20:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037f30:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037f40:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f60:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037f60:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037f70:·303 | 00037f70:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f80:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f90:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037fa0:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037fb0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037fc0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037fd0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037fe0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 16708, 251 lines modified | Offset 16708, 251 lines modified | ||
| 00041430:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | 00041430:·7461·2d74·6172·6765·743d·2223·6964·6d39··ta-target="#idm9 | ||
| 00041440:·3230·3022·2074·6162·696e·6465·783d·2230··200"·tabindex="0 | 00041440:·3230·3022·2074·6162·696e·6465·783d·2230··200"·tabindex="0 | ||
| 00041450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00041450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00041460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00041460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00041470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00041470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00041480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00041480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00041490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00041490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000414a0:·6961·7469·6f6e·2041·6e73·6962·6c65·2073··iation·Ansible·s | |||
| 000414b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 000414c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 000414d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000414e0:·6c61·7073·6522·2069·643d·2269·646d·3932··lapse"·id="idm92 | |||
| 000414f0:·3030·223e·3c74·6162·6c65·2063·6c61·7373··00"><table·class | |||
| 00041500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00041510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00041520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00041530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00041540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00041550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00041560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00041570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00041580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00041590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000415a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 000415b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 000415c0:·3c2f·7468·3e3c·7464·3e72·6573·7472·6963··</th><td>restric | |||
| 000415d0:·743c·2f74·643e·3c2f·7472·3e3c·2f74·6162··t</td></tr></tab | |||
| 000415e0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000415f0:·6e61·6d65·3a20·5843·4344·4620·5661·6c75··name:·XCCDF·Valu | |||
| 00041600:·6520·7661·725f·7379·7374·656d·5f63·7279··e·var_system_cry | |||
| 00041610:·7074·6f5f·706f·6c69·6379·2023·2070·726f··pto_policy·#·pro | |||
| 00041620:·6d6f·7465·2074·6f20·7661·7269·6162·6c65··mote·to·variable | |||
| 00041630:·0a20·2073·6574·5f66·6163·743a·0a20·2020··.··set_fact:.··· | |||
| 00041640:·2076·6172·5f73·7973·7465·6d5f·6372·7970···var_system_cryp | |||
| 00041650:·746f·5f70·6f6c·6963·793a·2021·2173·7472··to_policy:·!!str | |||
| 00041660:·203c·6162·6272·2074·6974·6c65·3d22·6672···<abbr·title="fr | |||
| 00041670:·6f6d·2050·726f·6669·6c65·2f72·6566·696e··om·Profile/refin | |||
| 00041680:·652d·7661·6c75·653a·2078·6363·6466·5f6f··e-value:·xccdf_o | |||
| 00041690:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | |||
| 000416a0:·6e74·656e·745f·7661·6c75·655f·7661·725f··ntent_value_var_ | |||
| 000416b0:·7379·7374·656d·5f63·7279·7074·6f5f·706f··system_crypto_po | |||
| 000416c0:·6c69·6379·223e·4649·5053·3c2f·6162·6272··licy">FIPS</abbr | |||
| 000416d0:·3e0a·2020·7461·6773·3a0a·2020·2020·2d20··>.··tags:.····-· | |||
| 000416e0:·616c·7761·7973·0a0a·2d20·6e61·6d65·3a20··always..-·name:· | |||
| 000416f0:·436f·6e66·6967·7572·6520·5379·7374·656d··Configure·System | |||
| 00041700:·2043·7279·7074·6f67·7261·7068·7920·506f···Cryptography·Po | |||
| 00041710:·6c69·6379·0a20·206c·696e·6569·6e66·696c··licy.··lineinfil | |||
| 00041720:·653a·0a20·2020·2070·6174·683a·202f·6574··e:.····path:·/et | |||
| 00041730:·632f·6372·7970·746f·2d70·6f6c·6963·6965··c/crypto-policie | |||
| 00041740:·732f·636f·6e66·6967·0a20·2020·2072·6567··s/config.····reg | |||
| 00041750:·6578·703a·205e·283f·2123·2928·5c53·2b29··exp:·^(?!#)(\S+) | |||
| 00041760:·240a·2020·2020·6c69·6e65·3a20·277b·7b20··$.····line:·'{{· | |||
| 00041770:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | |||
| 00041780:·6f5f·706f·6c69·6379·207d·7d27·0a20·2020··o_policy·}}'.··· | |||
| 00041790:·2063·7265·6174·653a·2074·7275·650a·2020···create:·true.·· | |||
| 000417a0:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 000417b0:·3435·302d·370a·2020·2d20·4449·5341·2d53··450-7.··-·DISA-S | |||
| 000417c0:·5449·472d·5248·454c·2d30·392d·3637·3130··TIG-RHEL-09-6710 | |||
| 000417d0:·3130·0a20·202d·2044·4953·412d·5354·4947··10.··-·DISA-STIG | |||
| 000417e0:·2d52·4845·4c2d·3039·2d36·3732·3033·300a··-RHEL-09-672030. | |||
| 000417f0:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 00041800:·454c·2d30·392d·3637·3230·3435·0a20·202d··EL-09-672045.··- | |||
| 00041810:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 00041820:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 00041830:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 00041840:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00041850:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 00041860:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 00041870:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 00041880:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 00041890:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 000418a0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 000418b0:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 000418c0:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| 000418d0:·6f6e·6669·6775·7265·5f63·7279·7074·6f5f··onfigure_crypto_ | |||
| 000418e0:·706f·6c69·6379·0a20·202d·2068·6967·685f··policy.··-·high_ | |||
| 000418f0:·7365·7665·7269·7479·0a20·202d·206c·6f77··severity.··-·low | |||
| 00041900:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 00041910:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 00041920:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 00041930:·6465·640a·2020·2d20·7265·7374·7269·6374··ded.··-·restrict | |||
| 00041940:·5f73·7472·6174·6567·790a·0a2d·206e·616d··_strategy..-·nam | |||
| 00041950:·653a·2056·6572·6966·7920·7468·6174·2043··e:·Verify·that·C | |||
| 00041960:·7279·7074·6f20·506f·6c69·6379·2069·7320··rypto·Policy·is· | |||
| 00041970:·5365·7420·2872·756e·7469·6d65·290a·2020··Set·(runtime).·· | |||
| 00041980:·636f·6d6d·616e·643a·202f·7573·722f·6269··command:·/usr/bi | |||
| 00041990:·6e2f·7570·6461·7465·2d63·7279·7074·6f2d··n/update-crypto- | |||
| 000419a0:·706f·6c69·6369·6573·202d·2d73·6574·207b··policies·--set·{ | |||
| 000419b0:·7b20·7661·725f·7379·7374·656d·5f63·7279··{·var_system_cry | |||
| 000419c0:·7074·6f5f·706f·6c69·6379·207d·7d0a·2020··pto_policy·}}.·· | |||
| 000419d0:·7461·6773·3a0a·2020·2d20·4343·452d·3833··tags:.··-·CCE-83 | |||
| 000419e0:·3435·302d·370a·2020·2d20·4449·5341·2d53··450-7.··-·DISA-S | |||
| 000419f0:·5449·472d·5248·454c·2d30·392d·3637·3130··TIG-RHEL-09-6710 | |||
| 00041a00:·3130·0a20·202d·2044·4953·412d·5354·4947··10.··-·DISA-STIG | |||
| 00041a10:·2d52·4845·4c2d·3039·2d36·3732·3033·300a··-RHEL-09-672030. | |||
| 00041a20:·2020·2d20·4449·5341·2d53·5449·472d·5248····-·DISA-STIG-RH | |||
| 00041a30:·454c·2d30·392d·3637·3230·3435·0a20·202d··EL-09-672045.··- | |||
| 00041a40:·204e·4953·542d·3830·302d·3533·2d41·432d···NIST-800-53-AC- | |||
| 00041a50:·3137·2832·290a·2020·2d20·4e49·5354·2d38··17(2).··-·NIST-8 | |||
| 00041a60:·3030·2d35·332d·4143·2d31·3728·6129·0a20··00-53-AC-17(a).· | |||
| 00041a70:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00041a80:·4d2d·3628·6129·0a20·202d·204e·4953·542d··M-6(a).··-·NIST- | |||
| 00041a90:·3830·302d·3533·2d4d·412d·3428·3629·0a20··800-53-MA-4(6).· | |||
| 00041aa0:·202d·204e·4953·542d·3830·302d·3533·2d53···-·NIST-800-53-S | |||
| 00041ab0:·432d·3132·2832·290a·2020·2d20·4e49·5354··C-12(2).··-·NIST | |||
| 00041ac0:·2d38·3030·2d35·332d·5343·2d31·3228·3329··-800-53-SC-12(3) | |||
| 00041ad0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00041ae0:·2d53·432d·3133·0a20·202d·2050·4349·2d44··-SC-13.··-·PCI-D | |||
| 00041af0:·5353·7634·2d32·2e32·2e37·0a20·202d·2063··SSv4-2.2.7.··-·c | |||
| 00041b00:·6f6e·6669·6775·7265·5f63·7279·7074·6f5f··onfigure_crypto_ | |||
| Max diff block lines reached; 3132891/3167445 bytes (98.91%) of diff not shown. | |||
| Offset 46, 15 lines modified | Offset 46, 15 lines modified | ||
| 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 47 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 48 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 49 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 50 | ····*·cpe:/o:redhat:enterprise_linux:9 | 50 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 52 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 53 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 55 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 56 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 57 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 58 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 59 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 60 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 439, 39 lines modified | Offset 439, 14 lines modified | ||
| 439 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 439 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 440 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 440 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 441 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 441 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 442 | ·············_\x8c_\x8i_\x8s······1.6.1 | 442 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 443 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 443 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 444 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 444 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 445 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 445 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 451 | --- | ||
| 452 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 453 | kind:·MachineConfig | ||
| 454 | spec: | ||
| 455 | ··config: | ||
| 456 | ····ignition: | ||
| 457 | ······version:·3.1.0 | ||
| 458 | ····systemd: | ||
| 459 | ······units: | ||
| 460 | ········-·name:·configure-crypto-policy.service | ||
| 461 | ··········enabled:·true | ||
| 462 | ··········contents:·| | ||
| 463 | ············[Unit] | ||
| 464 | ············Before=kubelet.service | ||
| 465 | ············[Service] | ||
| 466 | ············Type=oneshot | ||
| 467 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 468 | ············RemainAfterExit=yes | ||
| 469 | ············[Install] | ||
| 470 | ············WantedBy=multi-user.target | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 446 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 447 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 448 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 449 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 450 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 476 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 451 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 477 | ··set_fact: | 452 | ··set_fact: |
| Offset 541, 14 lines modified | Offset 516, 39 lines modified | ||
| 541 | » echo·"to·see·what·package·to·(re)install"·>&2 | 516 | » echo·"to·see·what·package·to·(re)install"·>&2 |
| 542 | » false··#·end·with·an·error·code | 517 | » false··#·end·with·an·error·code |
| 543 | elif·test·"$rc"·!=·0;·then | 518 | elif·test·"$rc"·!=·0;·then |
| 544 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 | 519 | » echo·"Error·invoking·the·update-crypto-policies·script:·$stderr_of_call"·>&2 |
| 545 | » false··#·end·with·an·error·code | 520 | » false··#·end·with·an·error·code |
| 546 | fi | 521 | fi |
| 522 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 523 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 524 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 525 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| 526 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | ||
| 527 | --- | ||
| 528 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 529 | kind:·MachineConfig | ||
| 530 | spec: | ||
| 531 | ··config: | ||
| 532 | ····ignition: | ||
| 533 | ······version:·3.1.0 | ||
| 534 | ····systemd: | ||
| 535 | ······units: | ||
| 536 | ········-·name:·configure-crypto-policy.service | ||
| 537 | ··········enabled:·true | ||
| 538 | ··········contents:·| | ||
| 539 | ············[Unit] | ||
| 540 | ············Before=kubelet.service | ||
| 541 | ············[Service] | ||
| 542 | ············Type=oneshot | ||
| 543 | ············ExecStart=update-crypto-policies·--set·{{.var_system_crypto_policy}} | ||
| 544 | ············RemainAfterExit=yes | ||
| 545 | ············[Install] | ||
| 546 | ············WantedBy=multi-user.target | ||
| 547 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 547 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SS\x8SH\x8H·t\x8to\x8o·u\x8us\x8se\x8e·S\x8Sy\x8ys\x8st\x8te\x8em\x8m·C\x8Cr\x8ry\x8yp\x8pt\x8to\x8o·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 548 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. | 548 | Crypto·Policies·provide·a·centralized·control·over·crypto·algorithms·usage·of·many·packages.·SSH·is·supported·by·crypto·policy,·but·the·SSH·configuration·may·be·set·up·to·ignore·it.·To·check·that·Crypto·Policies·settings·are·configured·correctly,·ensure·that·the·CRYPTO_POLICY·variable·is·either·commented·or·not·set·at·all·in·the·/etc/sysconfig/sshd. |
| 549 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. | 549 | Rationale:···Overriding·the·system·crypto·policy·makes·the·behavior·of·the·SSH·service·violate·expectations,·and·makes·system·configuration·more·fragmented. |
| 550 | Severity: ···medium | 550 | Severity: ···medium |
| 551 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy | 551 | Rule·ID:·····xccdf_org.ssgproject.content_rule_configure_ssh_crypto_policy |
| 552 | Identifiers:·CCE-83445-7 | 552 | Identifiers:·CCE-83445-7 |
| 553 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 | 553 | ·············_\x8d_\x8i_\x8s_\x8a·····CCI-001453 |
| Offset 1552, 33 lines modified | Offset 1552, 25 lines modified | ||
| 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 | 1552 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000366 |
| 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) | 1553 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a)(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1),·164.310(d)(2)(iii) |
| 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 | 1554 | References:··_\x8n_\x8i_\x8s_\x8t····CM-6 |
| 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 | 1555 | ·············_\x8o_\x8s_\x8p_\x8p····FIA_UAU.1 |
| 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1556 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 | 1557 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-211055 |
| 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule | 1558 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-257786r943026_rule |
| 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 1559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_.S_.B_.u_.i_.l_.d_.·_.B_.l_.u_.e_.p_.r_.i_.n_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1560 | [customizations.services] | ||
| 1561 | masked·=·["debug-shell"] | ||
| 1562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 1560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1563 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:· | 1564 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:····· | 1565 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1566 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1567 | service·disable·debug-shell | ||
| 1564 | apiVersion:·machineconfiguration.openshift.io/v1 | ||
| 1565 | kind:·MachineConfig | ||
| 1566 | spec: | ||
| 1567 | ··config: | ||
| 1568 | ····ignition: | ||
| 1569 | ······version:·3.1.0 | ||
| 1570 | ····systemd: | ||
| 1571 | ······units: | ||
| 1572 | ······-·name:·debug-shell.service | ||
| 1573 | ········enabled:·false | ||
| 1574 | ········mask:·true | ||
| 1575 | ······-·name:·debug-shell.socket | ||
| 1576 | ········enabled:·false | ||
| Max diff block lines reached; 145466/151797 bytes (95.83%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037e80:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037e90:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037ea0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037eb0:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037ec0:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037ed0:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ee0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037ef0:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037f00:·303 | 00037f00:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037f10:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037f20:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037f30:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037f40:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037f50:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037f60:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037f70:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17225, 236 lines modified | Offset 17225, 236 lines modified | ||
| 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 00043480:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 00043490:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 000434a0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 000434b0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 000434c0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 000434d0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 000434e0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 000434f0:·6961·7469·6f6e·204 | 000434f0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00043500:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00043500:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00043510:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00043520:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00043530:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 00043540:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 00043550:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00043560:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00043570:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00043580:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00043590:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 000435a0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000435b0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 000435c0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 000435d0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 000435e0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 000435f0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00043600:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00043610:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00043620:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00043630:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00043640:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 00043650:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 00043660:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 00043670:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 00043680:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 00043690:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 000436a0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 000436b0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 000436c0:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 000436d0:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 000436e0:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 000436f0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 00043700:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 00043710:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 00043720:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 00043730:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 00043740:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 00043750:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 00043760:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 00043770:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 00043780:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 00043790:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 000437a0:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 000437b0:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 000437c0:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 000437d0:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 000437e0:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 000437f0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 00043800:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 00043810:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 00043820:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 00043830:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 00043840:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 00043850:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00043860:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00043870:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00043880:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 00043890:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000438a0:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 000438b0:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 000438c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 000438d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 000438e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000438f0:·6964·6d38·3430·3722·3e3c·7461·626c·6520··idm8407"><table· | |||
| 00043900:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 00043910:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 00043920:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 00043930:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 00043940:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00043950:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00043960:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00043970:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00043980:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00043990:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 000439a0:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 000439b0:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 000439c0:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 000439d0:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 000439e0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000439f0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 00043a00:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 00043a10:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 00043a20:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 00043a30:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 00043a40:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 00043a50:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 00043a60:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00043a70:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00043a80:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00043a90:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 00043aa0:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 00043ab0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 00043ac0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 00043ad0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 00043ae0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 00043af0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00043b00:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00043b10:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 00043b20:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 00043b30:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00043b40:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| Max diff block lines reached; 3533013/3565497 bytes (99.09%) of diff not shown. | |||
| Offset 44, 15 lines modified | Offset 44, 15 lines modified | ||
| 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Australian·Cyber·Security·Centre·(ACSC)·ISM·Official |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ism_o |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:redhat:enterprise_linux:9 | 48 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 50 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 51 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 52 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 53 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 54 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 55 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 58 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 574, 14 lines modified | Offset 574, 33 lines modified | ||
| 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 574 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 575 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 576 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 577 | ·············_\x8c_\x8i_\x8s············6.1.1 | 577 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 578 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 579 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 580 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 582 | [[packages]] | ||
| 583 | name·=·"aide" | ||
| 584 | version·=·"*" | ||
| 585 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 586 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 587 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 588 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 589 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 590 | package·--add=aide | ||
| 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 592 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 593 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 594 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 595 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 596 | package·install·aide | ||
| 581 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 597 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 582 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 598 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 583 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 599 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 584 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 600 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 585 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 601 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 586 | -·name:·Ensure·aide·is·installed | 602 | -·name:·Ensure·aide·is·installed |
| 587 | ··package: | 603 | ··package: |
| Offset 597, 38 lines modified | Offset 616, 14 lines modified | ||
| 597 | ··-·PCI-DSSv4-11.5.2 | 616 | ··-·PCI-DSSv4-11.5.2 |
| 598 | ··-·enable_strategy | 617 | ··-·enable_strategy |
| 599 | ··-·low_complexity | 618 | ··-·low_complexity |
| 600 | ··-·low_disruption | 619 | ··-·low_disruption |
| 601 | ··-·medium_severity | 620 | ··-·medium_severity |
| 602 | ··-·no_reboot_needed | 621 | ··-·no_reboot_needed |
| 603 | ··-·package_aide_installed | 622 | ··-·package_aide_installed |
| 604 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 605 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 606 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 607 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 608 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 609 | include·install_aide | ||
| 610 | class·install_aide·{ | ||
| 611 | ··package·{·'aide': | ||
| 612 | ····ensure·=>·'installed', | ||
| 613 | ··} | ||
| 614 | } | ||
| 615 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 616 | [[packages]] | ||
| 617 | name·=·"aide" | ||
| 618 | version·=·"*" | ||
| 619 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 620 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 621 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 622 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 623 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 624 | package·install·aide | ||
| 625 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 623 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 626 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 624 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 627 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 625 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 628 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 626 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 629 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 627 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 630 | #·Remediation·is·applicable·only·in·certain·platforms | 628 | #·Remediation·is·applicable·only·in·certain·platforms |
| 631 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 629 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 636, 21 lines modified | Offset 631, 26 lines modified | ||
| 636 | if·!·rpm·-q·--quiet·"aide"·;·then | 631 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 637 | ····dnf·install·-y·"aide" | 632 | ····dnf·install·-y·"aide" |
| 638 | fi | 633 | fi |
| 639 | else | 634 | else |
| 640 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 635 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 641 | fi | 636 | fi |
| 642 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 637 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 643 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 638 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 644 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 639 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 645 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 640 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 646 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 641 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 642 | include·install_aide | ||
| 647 | 643 | class·install_aide·{ | |
| 644 | ··package·{·'aide': | ||
| 645 | ····ensure·=>·'installed', | ||
| 646 | ··} | ||
| 647 | } | ||
| 648 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule | 648 | Group ·Federal·Information·Processing·Standard·(FIPS)· Group·contains·1·rule |
| 649 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. | 649 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·Federal·Information·Processing·Standard·(FIPS)·is·a·computer·security·standard·which·is·developed·by·the·U.S.·Government·and·industry·working·groups·to·validate·the·quality·of·cryptographic·modules.·The·FIPS·standard·provides·four·security·levels·to·ensure·adequate·coverage·of·different·industries,·implementation·of·cryptographic·modules,·and·organizational·sizes·and·requirements. |
| 650 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. | 650 | FIPS·140-2·is·the·current·standard·for·validating·that·mechanisms·used·to·access·cryptographic·modules·utilize·authentication·that·meets·industry·and·government·requirements.·For·government·systems,·this·allows·Security·Levels·1,·2,·3,·or·4·for·use·on·Red·Hat·Enterprise·Linux·9. |
| 651 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. | 651 | See·_\x8h\x8h_\x8t\x8t_\x8t\x8t_\x8p\x8p_\x8:\x8:_\x8/\x8/_\x8/\x8/_\x8c\x8c_\x8s\x8s_\x8r\x8r_\x8c\x8c_\x8.\x8._\x8n\x8n_\x8i\x8i_\x8s\x8s_\x8t\x8t_\x8.\x8._\x8g\x8g_\x8o\x8o_\x8v\x8v_\x8/\x8/_\x8p\x8p_\x8u\x8u_\x8b\x8b_\x8l\x8l_\x8i\x8i_\x8c\x8c_\x8a\x8a_\x8t\x8t_\x8i\x8i_\x8o\x8o_\x8n\x8n_\x8s\x8s_\x8/\x8/_\x8P\x8P_\x8u\x8u_\x8b\x8b_\x8s\x8s_\x8F\x8F_\x8I\x8I_\x8P\x8P_\x8S\x8S_\x8.\x8._\x8h\x8h_\x8t\x8t_\x8m\x8m_\x8l\x8l·for·more·information. |
| 652 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 652 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·F\x8FI\x8IP\x8PS\x8S·M\x8Mo\x8od\x8de\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| Offset 672, 14 lines modified | Offset 672, 18 lines modified | ||
| 672 | ·············_\x8i_\x8s_\x8m······1446 | 672 | ·············_\x8i_\x8s_\x8m······1446 |
| 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 673 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 674 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 675 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 676 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 677 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 678 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 680 | [customizations] | ||
| 681 | fips·=·true | ||
| Max diff block lines reached; 232567/238922 bytes (97.34%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·303 | 00037e50:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 15582, 267 lines modified | Offset 15582, 267 lines modified | ||
| 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003cdd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | 0003cde0:·3839·3836·2220·7461·6269·6e64·6578·3d22··8986"·tabindex=" | ||
| 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003cdf0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003ce00:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003ce10:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003ce20:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003ce30:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003ce40:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | |||
| 0003ce50:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003ce60:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003ce70:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003ce80:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003ce90:·2220·6964·3d22·6964·6d38·3938·3622·3e3c··"·id="idm8986">< | |||
| 0003cea0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 0003ceb0:·6f6d·697a·6174·696f·6e73·5d0a·6669·7073··omizations].fips | |||
| 0003cec0:·203d·2074·7275·650a·3c2f·636f·6465·3e3c···=·true.</code>< | |||
| 0003ced0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003cee0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003cef0:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003cf00:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003cf10:·612d·7461·7267·6574·3d22·2369·646d·3839··a-target="#idm89 | |||
| 0003cf20:·3837·2220·7461·6269·6e64·6578·3d22·3022··87"·tabindex="0" | |||
| 0003cf30:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003cf40:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003cf50:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003cf60:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003cf70:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003c | 0003cf80:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | ||
| 0003c | 0003cf90:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | ||
| 0003c | 0003cfa0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | ||
| 0003c | 0003cfb0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | ||
| 0003c | 0003cfc0:·6170·7365·2220·6964·3d22·6964·6d38·3938··apse"·id="idm898 | ||
| 0003c | 0003cfd0:·3722·3e3c·7461·626c·6520·636c·6173·733d··7"><table·class= | ||
| 0003c | 0003cfe0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | ||
| 0003c | 0003cff0:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | ||
| 0003 | 0003d000:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | ||
| 0003 | 0003d010:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | ||
| 0003 | 0003d020:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | ||
| 0003 | 0003d030:·3e6d·6564·6975·6d3c·2f74·643e·3c2f·7472··>medium</td></tr | ||
| 0003 | 0003d040:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | ||
| 0003 | 0003d050:·696f·6e3a·3c2f·7468·3e3c·7464·3e6d·6564··ion:</th><td>med | ||
| 0003 | 0003d060:·6975·6d3c·2f74·643e·3c2f·7472·3e3c·7472··ium</td></tr><tr | ||
| 0003 | 0003d070:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 0003 | 0003d080:·3e3c·7464·3e74·7275·653c·2f74·643e·3c2f··><td>true</td></ | ||
| 0003 | 0003d090:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | ||
| 0003 | 0003d0a0:·6567·793a·3c2f·7468·3e3c·7464·3e72·6573··egy:</th><td>res | ||
| 0003 | 0003d0b0:·7472·6963·743c·2f74·643e·3c2f·7472·3e3c··trict</td></tr>< | ||
| 0003 | 0003d0c0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | ||
| 0003 | 0003d0d0:·653e·2d20·6e61·6d65·3a20·5843·4344·4620··e>-·name:·XCCDF· | ||
| 0003 | 0003d0e0:·5661·6c75·6520·7661·725f·7379·7374·656d··Value·var_system | ||
| 0003 | 0003d0f0:·5f63·7279·7074·6f5f·706f·6c69·6379·2023··_crypto_policy·# | ||
| 0003 | 0003d100:·2070·726f·6d6f·7465·2074·6f20·7661·7269···promote·to·vari | ||
| 0003 | 0003d110:·6162·6c65·0a20·2073·6574·5f66·6163·743a··able.··set_fact: | ||
| 0003 | 0003d120:·0a20·2020·2076·6172·5f73·7973·7465·6d5f··.····var_system_ | ||
| 0003 | 0003d130:·6372·7970·746f·5f70·6f6c·6963·793a·2021··crypto_policy:·! | ||
| 0003d | 0003d140:·2173·7472·203c·6162·6272·2074·6974·6c65··!str·<abbr·title | ||
| 0003d | 0003d150:·3d22·6672·6f6d·2050·726f·6669·6c65·2f72··="from·Profile/r | ||
| 0003d | 0003d160:·6566·696e·652d·7661·6c75·653a·2078·6363··efine-value:·xcc | ||
| 0003d | 0003d170:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 0003d | 0003d180:·742e·636f·6e74·656e·745f·7661·6c75·655f··t.content_value_ | ||
| 0003d | 0003d190:·7661·725f·7379·7374·656d·5f63·7279·7074··var_system_crypt | ||
| 0003d | 0003d1a0:·6f5f·706f·6c69·6379·223e·4649·5053·3a4f··o_policy">FIPS:O | ||
| 0003d | 0003d1b0:·5350·503c·2f61·6262·723e·0a20·2074·6167··SPP</abbr>.··tag | ||
| 0003d | 0003d1c0:·733a·0a20·2020·202d·2061·6c77·6179·730a··s:.····-·always. | ||
| 0003d | 0003d1d0:·0a2d·206e·616d·653a·2045·6e61·626c·6520··.-·name:·Enable· | ||
| 0003d | 0003d1e0:·4649·5053·204d·6f64·6520·2d20·4368·6563··FIPS·Mode·-·Chec | ||
| 0003d | 0003d1f0:·6b20·746f·2053·6565·2074·6865·2043·7572··k·to·See·the·Cur | ||
| 0003d | 0003d200:·7265·6e74·2053·7461·7475·7320·6f66·2046··rent·Status·of·F | ||
| 0003d | 0003d210:·4950·5320·4d6f·6465·0a20·2061·6e73·6962··IPS·Mode.··ansib | ||
| 0003d | 0003d220:·6c65·2e62·7569·6c74·696e·2e63·6f6d·6d61··le.builtin.comma | ||
| 0003d | 0003d230:·6e64·3a20·2f75·7372·2f62·696e·2f66·6970··nd:·/usr/bin/fip | ||
| 0003d | 0003d240:·732d·6d6f·6465·2d73·6574·7570·202d·2d63··s-mode-setup·--c | ||
| 0003d | 0003d250:·6865·636b·0a20·2072·6567·6973·7465·723a··heck.··register: | ||
| 0003d | 0003d260:·2069·735f·6669·7073·5f65·6e61·626c·6564···is_fips_enabled | ||
| 0003d | 0003d270:·0a20·2066·6169·6c65·645f·7768·656e·3a20··.··failed_when:· | ||
| 0003d | 0003d280:·6661·6c73·650a·2020·6368·616e·6765·645f··false.··changed_ | ||
| 0003d | 0003d290:·7768·656e·3a20·6661·6c73·650a·2020·7768··when:·false.··wh | ||
| 0003d | 0003d2a0:·656e·3a0a·2020·2d20·2820·616e·7369·626c··en:.··-·(·ansibl | ||
| 0003d | 0003d2b0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | ||
| 0003d | 0003d2c0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | ||
| 0003d | 0003d2d0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | ||
| 0003d | 0003d2e0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | ||
| 0003d | 0003d2f0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | ||
| 0003d | 0003d300:·2020·2020·616e·6420·6e6f·7420·2820·6c6f······and·not·(·lo | ||
| 0003d | 0003d310:·6f6b·7570·2822·656e·7622·2c20·2263·6f6e··okup("env",·"con | ||
| 0003d | 0003d320:·7461·696e·6572·2229·203d·3d20·2262·7772··tainer")·==·"bwr | ||
| 0003d | 0003d330:·6170·2d6f·7362·7569·6c64·2220·2920·290a··ap-osbuild"·)·). | ||
| 0003d | 0003d340:·2020·2d20·616e·7369·626c·655f·7669·7274····-·ansible_virt | ||
| 0003d | 0003d350:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | ||
| 0003d | 0003d360:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | ||
| 0003d | 0003d370:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | ||
| 0003d | 0003d380:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | ||
| 0003d | 0003d390:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | ||
| 0003d | 0003d3a0:·3a0a·2020·2d20·4343·452d·3838·3734·322d··:.··-·CCE-88742- | ||
| 0003d | 0003d3b0:·320a·2020·2d20·4449·5341·2d53·5449·472d··2.··-·DISA-STIG- | ||
| 0003d | 0003d3c0:·5248·454c·2d30·392d·3637·3130·3130·0a20··RHEL-09-671010.· | ||
| 0003d | 0003d3d0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | ||
| 0003d | 0003d3e0:·4d2d·3328·3629·0a20·202d·204e·4953·542d··M-3(6).··-·NIST- | ||
| 0003d | 0003d3f0:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| 0003d | 0003d400:·202d·204e·4953·542d·3830·302d·3533·2d49···-·NIST-800-53-I | ||
| 0003d | 0003d410:·412d·370a·2020·2d20·4e49·5354·2d38·3030··A-7.··-·NIST-800 | ||
| 0003d | 0003d420:·2d35·332d·5343·2d31·320a·2020·2d20·4e49··-53-SC-12.··-·NI | ||
| 0003d430:·5354·2d38·3030·2d35·332d·5343·2d31·3228··ST-800-53-SC-12( | |||
| 0003d440:·3229·0a20·202d·204e·4953·542d·3830·302d··2).··-·NIST-800- | |||
| 0003d450:·3533·2d53·432d·3132·2833·290a·2020·2d20··53-SC-12(3).··-· | |||
| 0003d | 0003d460:·4e49·5354·2d38·3030·2d35·332d·5343·2d31··NIST-800-53-SC-1 | ||
| 0003d300:·3228·3229·0a20·202d·204e·4953·542d·3830··2(2).··-·NIST-80 | |||
| 0003d310:·302d·3533·2d53·432d·3132·2833·290a·2020··0-53-SC-12(3).·· | |||
| 0003d320:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 0003d | 0003d470:·330a·2020·2d20·656e·6162·6c65·5f66·6970··3.··-·enable_fip | ||
| Max diff block lines reached; 3691115/3727877 bytes (99.01%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 41 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Protection·Profile·for·General·Purpose·Operating·Systems |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_ospp |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:redhat:enterprise_linux:9 | 45 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 53 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········4.·_\x8z_\x8I_\x8P_\x8L_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 199, 14 lines modified | Offset 199, 18 lines modified | ||
| 199 | ·············_\x8i_\x8s_\x8m······1446 | 199 | ·············_\x8i_\x8s_\x8m······1446 |
| 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 200 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 201 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 202 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 203 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 204 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 205 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 207 | [customizations] | ||
| 208 | fips·=·true | ||
| 206 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 209 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 207 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 210 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 208 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 211 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 209 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 212 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 210 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 213 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 211 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 214 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 212 | ··set_fact: | 215 | ··set_fact: |
| Offset 310, 18 lines modified | Offset 314, 14 lines modified | ||
| 310 | ··-·NIST-800-53-SC-13 | 314 | ··-·NIST-800-53-SC-13 |
| 311 | ··-·enable_fips_mode | 315 | ··-·enable_fips_mode |
| 312 | ··-·high_severity | 316 | ··-·high_severity |
| 313 | ··-·medium_complexity | 317 | ··-·medium_complexity |
| 314 | ··-·medium_disruption | 318 | ··-·medium_disruption |
| 315 | ··-·reboot_required | 319 | ··-·reboot_required |
| 316 | ··-·restrict_strategy | 320 | ··-·restrict_strategy |
| 317 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 318 | [customizations] | ||
| 319 | fips·=·true | ||
| 320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 321 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 321 | #·Remediation·is·applicable·only·in·certain·platforms | 322 | #·Remediation·is·applicable·only·in·certain·platforms |
| 322 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 323 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 323 | var_system_crypto_policy='FIPS:OSPP' | 324 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 362, 14 lines modified | Offset 362, 33 lines modified | ||
| 362 | Severity: ···medium | 362 | Severity: ···medium |
| 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed | 363 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_crypto-policies_installed |
| 364 | Identifiers:·CCE-83442-4 | 364 | Identifiers:·CCE-83442-4 |
| 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 365 | ·············_\x8o_\x8s_\x8p_\x8p····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 366 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 | 367 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··RHEL-09-672010 |
| 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule | 368 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-258234r926689_rule |
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 370 | [[packages]] | ||
| 371 | name·=·"crypto-policies" | ||
| 372 | version·=·"*" | ||
| 373 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 374 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 375 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 376 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 377 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 378 | package·--add=crypto-policies | ||
| 379 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 380 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 381 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 382 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 383 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 384 | package·install·crypto-policies | ||
| 369 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 385 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 370 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 386 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 371 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 387 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 372 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 388 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 373 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 389 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 374 | -·name:·Ensure·crypto-policies·is·installed | 390 | -·name:·Ensure·crypto-policies·is·installed |
| 375 | ··package: | 391 | ··package: |
| Offset 380, 54 lines modified | Offset 399, 35 lines modified | ||
| 380 | ··-·DISA-STIG-RHEL-09-672010 | 399 | ··-·DISA-STIG-RHEL-09-672010 |
| 381 | ··-·enable_strategy | 400 | ··-·enable_strategy |
| 382 | ··-·low_complexity | 401 | ··-·low_complexity |
| 383 | ··-·low_disruption | 402 | ··-·low_disruption |
| 384 | ··-·medium_severity | 403 | ··-·medium_severity |
| 385 | ··-·no_reboot_needed | 404 | ··-·no_reboot_needed |
| 386 | ··-·package_crypto-policies_installed | 405 | ··-·package_crypto-policies_installed |
| 387 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 388 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 389 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 390 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 391 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 392 | include·install_crypto-policies | ||
| 393 | class·install_crypto-policies·{ | ||
| 394 | ··package·{·'crypto-policies': | ||
| 395 | ····ensure·=>·'installed', | ||
| 396 | ··} | ||
| 397 | } | ||
| 398 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 399 | [[packages]] | ||
| 400 | name·=·"crypto-policies" | ||
| 401 | version·=·"*" | ||
| 402 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 403 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 404 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 405 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 406 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 407 | package·install·crypto-policies | ||
| 408 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 409 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 410 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 411 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 412 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 413 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then | 411 | if·!·rpm·-q·--quiet·"crypto-policies"·;·then |
| 414 | ····dnf·install·-y·"crypto-policies" | 412 | ····dnf·install·-y·"crypto-policies" |
| Max diff block lines reached; 389658/395405 bytes (98.55%) of diff not shown. | |||
| Offset 14302, 15 lines modified | Offset 14302, 15 lines modified | ||
| 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037dd0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037de0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00037df0:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00037e00:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00037e10:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00037e20:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00037e30:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00037e40:·2032·3032·3 | 00037e40:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00037e50:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00037e60:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00037e70:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00037e80:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00037e90:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00037ea0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00037eb0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 16527, 237 lines modified | Offset 16527, 237 lines modified | ||
| 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000408e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | 000408f0:·2369·646d·3834·3036·2220·7461·6269·6e64··#idm8406"·tabind | ||
| 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00040900:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00040910:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00040920:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00040930:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00040940:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00040950:·5265·6d65·6469·6174·696f·6e20·4 | 00040950:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00040960:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00040970:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00040980:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00040990:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000409a0:·6964·6d38·3430·3622·3e3c·7461·626c·6520··idm8406"><table· | |||
| 000409b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000409c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000409d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000409e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000409 | 00040960:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 00040970:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00040980:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00040990:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000409a0:·6170·7365·2220·6964·3d22·6964·6d38·3430··apse"·id="idm840 | |||
| 000409b0:·3622·3e3c·7072·653e·3c63·6f64·653e·0a5b··6"><pre><code>.[ | |||
| 000409c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000409d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000409e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 000409f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00040a00:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00040a10:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00040a20:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00040a30:·612d·7461·7267·6574·3d22·2369·646d·3834··a-target="#idm84 | |||
| 00040a40:·3037·2220·7461·6269·6e64·6578·3d22·3022··07"·tabindex="0" | |||
| 00040a50:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00040a60:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00040a70:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00040a80:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00040a90:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 00040aa0:·6174·696f·6e20·416e·6163·6f6e·6461·2073··ation·Anaconda·s | |||
| 00040ab0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00040ac0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00040ad0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00040ae0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 00040af0:·3037·223e·3c74·6162·6c65·2063·6c61·7373··07"><table·class | |||
| 00040b00:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 00040b10:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 00040b20:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 00040b30:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 00040b40:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 00040b50:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00040b60:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00040 | 00040b70:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | ||
| 00040 | 00040b80:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00040 | 00040b90:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 00040ba0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00040bb0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00040bc0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00040bd0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00040be0:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 00040bf0:·6b61·6765·202d·2d61·6464·3d61·6964·650a··kage·--add=aide. | |||
| 00040c00:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 00040c10:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 00040c20:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 00040c30:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00040c40:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040c50:·3d22·2369·646d·3834·3038·2220·7461·6269··="#idm8408"·tabi | |||
| 00040c60:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040c70:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040c80:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040c90:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040ca0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040cb0:·223e·5265·6d65·6469·6174·696f·6e20·7363··">Remediation·sc | |||
| 00040cc0:·7269·7074·20e2·87b2·3c2f·613e·3c62·723e··ript·...</a><br> | |||
| 00040cd0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040ce0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040cf0:·7073·6522·2069·643d·2269·646d·3834·3038··pse"·id="idm8408 | |||
| 00040d00:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040d10:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040d20:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040d30:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040d40:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040d50:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040 | 00040d60:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00040a40:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00040 | 00040d70:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | ||
| 00040d80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00040 | 00040d90:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | ||
| 00040 | 00040da0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | ||
| 00040db0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00040dc0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040dd0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040de0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040df0:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 00040e00:·6765·2069·6e73·7461·6c6c·2061·6964·650a··ge·install·aide. | |||
| 00040a80:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 00040a90:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 00040aa0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 00040ab0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 00040ac0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 00040ad0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 00040ae0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 00040af0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00040b00:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00040b10:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00040b20:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00040b30:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00040b40:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00040b50:·6167·733a·0a20·202d·2043·4345·2d39·3038··ags:.··-·CCE-908 | |||
| 00040b60:·3433·2d34·0a20·202d·2043·4a49·532d·352e··43-4.··-·CJIS-5. | |||
| 00040b70:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00040b80:·5354·4947·2d52·4845·4c2d·3039·2d36·3531··STIG-RHEL-09-651 | |||
| 00040b90:·3031·300a·2020·2d20·4e49·5354·2d38·3030··010.··-·NIST-800 | |||
| Max diff block lines reached; 4208308/4240792 bytes (99.23%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4.0·Control·Baseline·for·Red·Hat·Enterprise·Linux·9 |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 45 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 46 | ····*·cpe:/o:redhat:enterprise_linux:9 | 46 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 54 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 55 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 56 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 426, 14 lines modified | Offset 426, 33 lines modified | ||
| 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 426 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 427 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 428 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 429 | ·············_\x8c_\x8i_\x8s············6.1.1 | 429 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 430 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 431 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 432 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 434 | [[packages]] | ||
| 435 | name·=·"aide" | ||
| 436 | version·=·"*" | ||
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | package·--add=aide | ||
| 443 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 444 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 445 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 446 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 447 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 448 | package·install·aide | ||
| 433 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 434 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 435 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 436 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 437 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 438 | -·name:·Ensure·aide·is·installed | 454 | -·name:·Ensure·aide·is·installed |
| 439 | ··package: | 455 | ··package: |
| Offset 449, 38 lines modified | Offset 468, 14 lines modified | ||
| 449 | ··-·PCI-DSSv4-11.5.2 | 468 | ··-·PCI-DSSv4-11.5.2 |
| 450 | ··-·enable_strategy | 469 | ··-·enable_strategy |
| 451 | ··-·low_complexity | 470 | ··-·low_complexity |
| 452 | ··-·low_disruption | 471 | ··-·low_disruption |
| 453 | ··-·medium_severity | 472 | ··-·medium_severity |
| 454 | ··-·no_reboot_needed | 473 | ··-·no_reboot_needed |
| 455 | ··-·package_aide_installed | 474 | ··-·package_aide_installed |
| 456 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 457 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 458 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 459 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 460 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 461 | include·install_aide | ||
| 462 | class·install_aide·{ | ||
| 463 | ··package·{·'aide': | ||
| 464 | ····ensure·=>·'installed', | ||
| 465 | ··} | ||
| 466 | } | ||
| 467 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 468 | [[packages]] | ||
| 469 | name·=·"aide" | ||
| 470 | version·=·"*" | ||
| 471 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 472 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 473 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 474 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 475 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 476 | package·install·aide | ||
| 477 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 475 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 478 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 476 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 479 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 477 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 480 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 478 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 481 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 479 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 482 | #·Remediation·is·applicable·only·in·certain·platforms | 480 | #·Remediation·is·applicable·only·in·certain·platforms |
| 483 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 481 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 488, 21 lines modified | Offset 483, 26 lines modified | ||
| 488 | if·!·rpm·-q·--quiet·"aide"·;·then | 483 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 489 | ····dnf·install·-y·"aide" | 484 | ····dnf·install·-y·"aide" |
| 490 | fi | 485 | fi |
| 491 | else | 486 | else |
| 492 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 487 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 493 | fi | 488 | fi |
| 494 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 489 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 495 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 490 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 496 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 491 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 497 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 492 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 498 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 493 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 494 | include·install_aide | ||
| 499 | 495 | class·install_aide·{ | |
| 496 | ··package·{·'aide': | ||
| 497 | ····ensure·=>·'installed', | ||
| 498 | ··} | ||
| 499 | } | ||
| 500 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 500 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 501 | Run·the·following·command·to·generate·a·new·database: | 501 | Run·the·following·command·to·generate·a·new·database: |
| 502 | $·sudo·/usr/sbin/aide·--init | 502 | $·sudo·/usr/sbin/aide·--init |
| 503 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 503 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 504 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 504 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 505 | To·initiate·a·manual·check,·run·the·following·command: | 505 | To·initiate·a·manual·check,·run·the·following·command: |
| 506 | $·sudo·/usr/sbin/aide·--check | 506 | $·sudo·/usr/sbin/aide·--check |
| Offset 817, 39 lines modified | Offset 817, 14 lines modified | ||
| 817 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 | 817 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1 |
| 818 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 | 818 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000396-GPOS-00176,·SRG-OS-000393-GPOS-00173,·SRG-OS-000394-GPOS-00174 |
| 819 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 | 819 | ·············_\x8c_\x8c_\x8n······A.5.SEC-RHEL4 |
| 820 | ·············_\x8c_\x8i_\x8s······1.6.1 | 820 | ·············_\x8c_\x8i_\x8s······1.6.1 |
| 821 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 | 821 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84··2.2.7 |
| 822 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 | 822 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010,·RHEL-09-672030,·RHEL-09-672045 |
| 823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule | 823 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule,·SV-258238r926701_rule,·SV-258241r926710_rule |
| 824 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8K_\x8u_\x8b_\x8e_\x8r_\x8n_\x8e_\x8t_\x8e_\x8s_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 825 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 826 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 827 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | ||
| Max diff block lines reached; 254295/260923 bytes (97.46%) of diff not shown. | |||
| Offset 14311, 15 lines modified | Offset 14311, 15 lines modified | ||
| 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037e60:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037e70:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037e80:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037e90:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037ea0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037eb0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037ec0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037ed0:·7320·6f66·2032·3032·3 | 00037ed0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037ef0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f00:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f10:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037f20:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037f30:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037f40:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15153, 237 lines modified | Offset 15153, 237 lines modified | ||
| 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | 0003b300:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | 0003b310:·3d22·2369·646d·3834·3036·2220·7461·6269··="#idm8406"·tabi | ||
| 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | 0003b320:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | 0003b330:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | 0003b340:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | 0003b350:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | 0003b360:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·4 | 0003b370:·223e·5265·6d65·6469·6174·696f·6e20·4f53··">Remediation·OS | ||
| 0003b380:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b390:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3 | 0003b380:·4275·696c·6420·426c·7565·7072·696e·7420··Build·Blueprint· | ||
| 0003b390:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b3a0:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b3b0:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b3c0:·6c6c·6170·7365·2220·6964·3d22·6964·6d38··llapse"·id="idm8 | |||
| 0003b3d0:·3430·3622·3e3c·7072·653e·3c63·6f64·653e··406"><pre><code> | |||
| 0003b3e0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0003b3f0:·6d65·203d·2022·6169·6465·220a·7665·7273··me·=·"aide".vers | |||
| 0003b400:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | |||
| 0003b410:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 0003b420:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 0003b430:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 0003b440:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 0003b450:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 0003b460:·3834·3037·2220·7461·6269·6e64·6578·3d22··8407"·tabindex=" | |||
| 0003b470:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 0003b480:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 0003b490:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 0003b4a0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 0003b4b0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 0003b4c0:·6469·6174·696f·6e20·416e·6163·6f6e·6461··diation·Anaconda | |||
| 0003b4d0:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b4e0:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b | 0003b4f0:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | ||
| 0003b3c0:·3d22·6964·6d38·3430·3622·3e3c·7461·626c··="idm8406"><tabl | |||
| 0003b3d0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3e0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b3f0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b400:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b | 0003b500:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | ||
| 0003b510:·3834·3037·223e·3c74·6162·6c65·2063·6c61··8407"><table·cla | |||
| 0003b520:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b530:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b540:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b550:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b560:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b570:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b580:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b590:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | ||
| 0003b | 0003b5a0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | ||
| 0003b | 0003b5b0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | ||
| 0003b5c0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b5d0:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b5e0:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b5f0:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b600:·6c65·3e3c·7072·653e·3c63·6f64·653e·0a70··le><pre><code>.p | |||
| 0003b610:·6163·6b61·6765·202d·2d61·6464·3d61·6964··ackage·--add=aid | |||
| 0003b620:·650a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··e.</code></pre>< | |||
| 0003b630:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b640:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b650:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b660:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b670:·6574·3d22·2369·646d·3834·3038·2220·7461··et="#idm8408"·ta | |||
| 0003b680:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b690:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b6a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b6b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b6c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b6d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b6e0:·7363·7269·7074·20e2·87b2·3c2f·613e·3c62··script·...</a><b | |||
| 0003b6f0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b700:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b710:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b720:·3038·223e·3c74·6162·6c65·2063·6c61·7373··08"><table·class | |||
| 0003b730:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b740:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b750:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b760:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b770:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b | 0003b780:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b460:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0003b | 0003b790:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | ||
| 0003b7a0:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b | 0003b7b0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 0003b | 0003b7c0:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | ||
| 0003b7d0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b7e0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b7f0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b800:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b810:·3e3c·7072·653e·3c63·6f64·653e·0a70·6163··><pre><code>.pac | |||
| 0003b820:·6b61·6765·2069·6e73·7461·6c6c·2061·6964··kage·install·aid | |||
| 0003b4a0:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0003b4b0:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0003b4c0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0003b4d0:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 0003b4e0:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 0003b4f0:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 0003b500:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 0003b510:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 0003b520:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 0003b530:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 0003b540:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 0003b550:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 0003b560:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 0003b570:·2074·6167·733a·0a20·202d·2043·4345·2d39···tags:.··-·CCE-9 | |||
| 0003b580:·3038·3433·2d34·0a20·202d·2043·4a49·532d··0843-4.··-·CJIS- | |||
| 0003b590:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 0003b5a0:·412d·5354·4947·2d52·4845·4c2d·3039·2d36··A-STIG-RHEL-09-6 | |||
| 0003b5b0:·3531·3031·300a·2020·2d20·4e49·5354·2d38··51010.··-·NIST-8 | |||
| 0003b5c0:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 0003b5d0:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| Max diff block lines reached; 7352492/7384976 bytes (99.56%) of diff not shown. | |||
| Offset 43, 15 lines modified | Offset 43, 15 lines modified | ||
| 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 | 44 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·Red·Hat·Enterprise·Linux·9 |
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 46 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 47 | ····*·cpe:/o:redhat:enterprise_linux:9 | 47 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 49 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 50 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 52 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 53 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 54 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 57 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 109, 14 lines modified | Offset 109, 33 lines modified | ||
| 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 109 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 110 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 111 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 112 | ·············_\x8c_\x8i_\x8s············6.1.1 | 112 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 114 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 117 | [[packages]] | ||
| 118 | name·=·"aide" | ||
| 119 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 125 | package·--add=aide | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | package·install·aide | ||
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 121 | -·name:·Ensure·aide·is·installed | 137 | -·name:·Ensure·aide·is·installed |
| 122 | ··package: | 138 | ··package: |
| Offset 132, 38 lines modified | Offset 151, 14 lines modified | ||
| 132 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 133 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 134 | ··-·low_complexity | 153 | ··-·low_complexity |
| 135 | ··-·low_disruption | 154 | ··-·low_disruption |
| 136 | ··-·medium_severity | 155 | ··-·medium_severity |
| 137 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 138 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 144 | include·install_aide | ||
| 145 | class·install_aide·{ | ||
| 146 | ··package·{·'aide': | ||
| 147 | ····ensure·=>·'installed', | ||
| 148 | ··} | ||
| 149 | } | ||
| 150 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 151 | [[packages]] | ||
| 152 | name·=·"aide" | ||
| 153 | version·=·"*" | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 155 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 156 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 157 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 158 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 159 | package·install·aide | ||
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 165 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 171, 21 lines modified | Offset 166, 26 lines modified | ||
| 171 | if·!·rpm·-q·--quiet·"aide"·;·then | 166 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 172 | ····dnf·install·-y·"aide" | 167 | ····dnf·install·-y·"aide" |
| 173 | fi | 168 | fi |
| 174 | else | 169 | else |
| 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 176 | fi | 171 | fi |
| 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 177 | include·install_aide | ||
| 182 | 178 | class·install_aide·{ | |
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 184 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 185 | $·sudo·/usr/sbin/aide·--init | 185 | $·sudo·/usr/sbin/aide·--init |
| 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 187 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 187 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 188 | To·initiate·a·manual·check,·run·the·following·command: | 188 | To·initiate·a·manual·check,·run·the·following·command: |
| 189 | $·sudo·/usr/sbin/aide·--check | 189 | $·sudo·/usr/sbin/aide·--check |
| Offset 1997, 14 lines modified | Offset 1997, 18 lines modified | ||
| 1997 | ·············_\x8i_\x8s_\x8m······1446 | 1997 | ·············_\x8i_\x8s_\x8m······1446 |
| 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1998 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1999 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2000 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2001 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2002 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2003 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2004 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2005 | [customizations] | ||
| 2006 | fips·=·true | ||
| Max diff block lines reached; 557746/563700 bytes (98.94%) of diff not shown. | |||
| Offset 14335, 15 lines modified | Offset 14335, 15 lines modified | ||
| 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00037fe0:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00037ff0:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038000:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038010:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 00038020:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 00038030:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 00038040:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 00038050:·2032·3032·3 | 00038050:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 00038060:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 00038070:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038080:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038090:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 000380a0:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 000380b0:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 000380c0:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 15172, 236 lines modified | Offset 15172, 236 lines modified | ||
| 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | 0003b430:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | ||
| 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | 0003b440:·3430·3622·2074·6162·696e·6465·783d·2230··406"·tabindex="0 | ||
| 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b450:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b460:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b470:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b480:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b490:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b4a0:·6961·7469·6f6e·204 | 0003b4a0:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b4b0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 0003b4b0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b4c0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0003b4d0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0003b4e0:·6c61·7073·6522·2069·643d·2269·646d·3834··lapse"·id="idm84 | |||
| 0003b4f0:·3036·223e·3c74·6162·6c65·2063·6c61·7373··06"><table·class | |||
| 0003b500:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b510:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 0003b520:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 0003b530:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b540:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b550:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b560:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b570:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 0003b580:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b590:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 0003b5a0:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 0003b5b0:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 0003b5c0:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 0003b5d0:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 0003b5e0:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 0003b5f0:·6d65·3a20·456e·7375·7265·2061·6964·6520··me:·Ensure·aide· | |||
| 0003b600:·6973·2069·6e73·7461·6c6c·6564·0a20·2070··is·installed.··p | |||
| 0003b610:·6163·6b61·6765·3a0a·2020·2020·6e61·6d65··ackage:.····name | |||
| 0003b620:·3a20·6169·6465·0a20·2020·2073·7461·7465··:·aide.····state | |||
| 0003b630:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 0003b640:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 0003b650:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 0003b660:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 0003b670:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 0003b680:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 0003b690:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 0003b6a0:·2020·2d20·4343·452d·3930·3834·332d·340a····-·CCE-90843-4. | |||
| 0003b6b0:·2020·2d20·434a·4953·2d35·2e31·302e·312e····-·CJIS-5.10.1. | |||
| 0003b6c0:·330a·2020·2d20·4449·5341·2d53·5449·472d··3.··-·DISA-STIG- | |||
| 0003b6d0:·5248·454c·2d30·392d·3635·3130·3130·0a20··RHEL-09-651010.· | |||
| 0003b6e0:·202d·204e·4953·542d·3830·302d·3533·2d43···-·NIST-800-53-C | |||
| 0003b6f0:·4d2d·3628·6129·0a20·202d·2050·4349·2d44··M-6(a).··-·PCI-D | |||
| 0003b700:·5353·2d52·6571·2d31·312e·350a·2020·2d20··SS-Req-11.5.··-· | |||
| 0003b710:·5043·492d·4453·5376·342d·3131·2e35·2e32··PCI-DSSv4-11.5.2 | |||
| 0003b720:·0a20·202d·2065·6e61·626c·655f·7374·7261··.··-·enable_stra | |||
| 0003b730:·7465·6779·0a20·202d·206c·6f77·5f63·6f6d··tegy.··-·low_com | |||
| 0003b740:·706c·6578·6974·790a·2020·2d20·6c6f·775f··plexity.··-·low_ | |||
| 0003b750:·6469·7372·7570·7469·6f6e·0a20·202d·206d··disruption.··-·m | |||
| 0003b760:·6564·6975·6d5f·7365·7665·7269·7479·0a20··edium_severity.· | |||
| 0003b770:·202d·206e·6f5f·7265·626f·6f74·5f6e·6565···-·no_reboot_nee | |||
| 0003b780:·6465·640a·2020·2d20·7061·636b·6167·655f··ded.··-·package_ | |||
| 0003b790:·6169·6465·5f69·6e73·7461·6c6c·6564·0a3c··aide_installed.< | |||
| 0003b7a0:·2f63·6f64·653e·3c2f·7072·653e·3c2f·6469··/code></pre></di | |||
| 0003b7b0:·763e·3c61·2063·6c61·7373·3d22·6274·6e20··v><a·class="btn· | |||
| 0003b7c0:·6274·6e2d·7375·6363·6573·7322·2064·6174··btn-success"·dat | |||
| 0003b7d0:·612d·746f·6767·6c65·3d22·636f·6c6c·6170··a-toggle="collap | |||
| 0003b7e0:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | |||
| 0003b7f0:·2223·6964·6d38·3430·3722·2074·6162·696e··"#idm8407"·tabin | |||
| 0003b800:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 0003b810:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 0003b820:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 0003b830:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 0003b840:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 0003b850:·3e52·656d·6564·6961·7469·6f6e·2050·7570··>Remediation·Pup | |||
| 0003b860:·7065·7420·736e·6970·7065·7420·e287·b23c··pet·snippet·...< | |||
| 0003b870:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003b880:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003b890:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0003b8a0:·6964·6d38·3430·3722·3e3c·7461·626c·6520··idm8407"><table· | |||
| 0003b8b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 0003b8c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 0003b8d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 0003b8e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 0003b8f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 0003b900:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b910:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 0003b920:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 0003b930:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b940:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 0003b950:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 0003b960:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 0003b970:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | |||
| 0003b980:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | |||
| 0003b990:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 0003b9a0:·3e69·6e63·6c75·6465·2069·6e73·7461·6c6c··>include·install | |||
| 0003b9b0:·5f61·6964·650a·0a63·6c61·7373·2069·6e73··_aide..class·ins | |||
| 0003b9c0:·7461·6c6c·5f61·6964·6520·7b0a·2020·7061··tall_aide·{.··pa | |||
| 0003b9d0:·636b·6167·6520·7b20·2761·6964·6527·3a0a··ckage·{·'aide':. | |||
| 0003b9e0:·2020·2020·656e·7375·7265·203d·2667·743b······ensure·=> | |||
| 0003b9f0:·2027·696e·7374·616c·6c65·6427·2c0a·2020···'installed',.·· | |||
| 0003ba00:·7d0a·7d0a·3c2f·636f·6465·3e3c·2f70·7265··}.}.</code></pre | |||
| 0003ba10:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 0003ba20:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 0003ba30:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 0003ba40:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 0003ba50:·7267·6574·3d22·2369·646d·3834·3038·2220··rget="#idm8408"· | |||
| 0003ba60:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 0003ba70:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 0003ba80:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 0003ba90:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 0003baa0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 0003bab0:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 0003bac0:·6e20·4f53·4275·696c·6420·426c·7565·7072··n·OSBuild·Bluepr | |||
| 0003bad0:·696e·7420·736e·6970·7065·7420·e287·b23c··int·snippet·...< | |||
| 0003bae0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0003baf0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0003bb00:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| Max diff block lines reached; 7263049/7295395 bytes (99.56%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·with·GUI·for·Red·Hat·Enterprise·Linux·9 |
| 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui | 51 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig_gui |
| 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 52 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 53 | ····*·cpe:/o:redhat:enterprise_linux:9 | 53 | ····*·cpe:/o:redhat:enterprise_linux:9 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 62 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 63 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 114, 14 lines modified | Offset 114, 33 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 116 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 117 | ·············_\x8c_\x8i_\x8s············6.1.1 | 117 | ·············_\x8c_\x8i_\x8s············6.1.1 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········RHEL-09-651010 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-258134r926389_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 130 | package·--add=aide | ||
| 131 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 132 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 133 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 134 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 135 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 136 | package·install·aide | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 143 | ··package: |
| Offset 137, 38 lines modified | Offset 156, 14 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 158 | ··-·low_complexity |
| 140 | ··-·low_disruption | 159 | ··-·low_disruption |
| 141 | ··-·medium_severity | 160 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | package·install·aide | ||
| 165 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 166 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 167 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 168 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 169 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 170 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 171 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 176, 21 lines modified | Offset 171, 26 lines modified | ||
| 176 | if·!·rpm·-q·--quiet·"aide"·;·then | 171 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 177 | ····dnf·install·-y·"aide" | 172 | ····dnf·install·-y·"aide" |
| 178 | fi | 173 | fi |
| 179 | else | 174 | else |
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 175 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 181 | fi | 176 | fi |
| 182 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 177 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 183 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 178 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 184 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 179 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 185 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 180 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 186 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 181 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 182 | include·install_aide | ||
| 187 | 183 | class·install_aide·{ | |
| 184 | ··package·{·'aide': | ||
| 185 | ····ensure·=>·'installed', | ||
| 186 | ··} | ||
| 187 | } | ||
| 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 188 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 189 | Run·the·following·command·to·generate·a·new·database: | 189 | Run·the·following·command·to·generate·a·new·database: |
| 190 | $·sudo·/usr/sbin/aide·--init | 190 | $·sudo·/usr/sbin/aide·--init |
| 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 191 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 192 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 193 | To·initiate·a·manual·check,·run·the·following·command: | 193 | To·initiate·a·manual·check,·run·the·following·command: |
| 194 | $·sudo·/usr/sbin/aide·--check | 194 | $·sudo·/usr/sbin/aide·--check |
| Offset 2002, 14 lines modified | Offset 2002, 18 lines modified | ||
| 2002 | ·············_\x8i_\x8s_\x8m······1446 | 2002 | ·············_\x8i_\x8s_\x8m······1446 |
| 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 2003 | ·············_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 2004 | References:··_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 2005 | ·············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 2006 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 | 2007 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d···RHEL-09-671010 |
| 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule | 2008 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f··SV-258230r926677_rule |
| 2009 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2010 | [customizations] | ||
| 2011 | fips·=·true | ||
| Max diff block lines reached; 548592/554559 bytes (98.92%) of diff not shown. | |||
| Offset 14301, 15 lines modified | Offset 14301, 15 lines modified | ||
| 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | 00037dc0:·746f·7279·3c2f·6832·3e3c·703e·4375·7272··tory</h2><p>Curr | ||
| 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | 00037dd0:·656e·7420·7665·7273·696f·6e3a·203c·7374··ent·version:·<st | ||
| 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | 00037de0:·726f·6e67·3e30·2e31·2e37·343c·2f73·7472··rong>0.1.74</str | ||
| 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | 00037df0:·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c·693e··ong></p><ul><li> | ||
| 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | 00037e00:·3c73·7472·6f6e·673e·6472·6166·743c·2f73··<strong>draft</s | ||
| 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | 00037e10:·7472·6f6e·673e·0a20·2020·2020·2020·2020··trong>.········· | ||
| 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | 00037e20:·2020·2020·2020·2020·2020·2028·6173·206f·············(as·o | ||
| 00037e30:·6620·3230·323 | 00037e30:·6620·3230·3235·2d30·312d·3233·290a·2020··f·2025-01-23).·· | ||
| 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | 00037e40:·2020·2020·2020·2020·2020·2020·2020·3c2f················</ | ||
| 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | 00037e50:·6c69·3e3c·2f75·6c3e·3c2f·6469·763e·3c68··li></ul></div><h | ||
| 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | 00037e60:·323e·5461·626c·6520·6f66·2043·6f6e·7465··2>Table·of·Conte | ||
| 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | 00037e70:·6e74·733c·2f68·323e·3c6f·6c3e·3c6c·693e··nts</h2><ol><li> | ||
| 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | 00037e80:·3c61·2068·7265·663d·2223·7863·6364·665f··<a·href="#xccdf_ | ||
| 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | 00037e90:·6f72·672e·7373·6770·726f·6a65·6374·2e63··org.ssgproject.c | ||
| 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | 00037ea0:·6f6e·7465·6e74·5f67·726f·7570·5f73·7973··ontent_group_sys | ||
| Offset 16392, 200 lines modified | Offset 16392, 200 lines modified | ||
| 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | 00040070:·2d74·6172·6765·743d·2223·6964·6d31·3932··-target="#idm192 | ||
| 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00040080:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00040090:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 000400a0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 000400b0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 000400c0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 000400d0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 000400e0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 000400f0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00040100:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00040110:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00040120:·7073·6522·2069·643d·2269·646d·3139·3230··pse"·id="idm1920 | |||
| 00040130:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00040140:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00040150:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00040160:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00040170:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00040180:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00040190:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 000401a0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 000401b0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000401c0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 000401d0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 000401e0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 000401f0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00040200:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00040210:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00040220:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00040230:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 00040240:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 00040250:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 00040260:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 00040270:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 00040280:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 00040290:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 000402a0:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 000402b0:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 000402c0:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 000402d0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 000402e0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 000402f0:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 00040300:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 00040310:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 00040320:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 00040330:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00040340:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00040350:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00040360:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00040370:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00040380:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00040390:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 000403a0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 000403b0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 000403c0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | |||
| 000403d0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | |||
| 000403e0:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 000403f0:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00040400:·3d22·2369·646d·3139·3231·2220·7461·6269··="#idm1921"·tabi | |||
| 00040410:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 00040420:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 00040430:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 00040440:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 00040450:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 00040460:·223e·5265·6d65·6469·6174·696f·6e20·5075··">Remediation·Pu | |||
| 00040470:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 00040480:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 00040490:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000404a0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 000404b0:·2269·646d·3139·3231·223e·3c74·6162·6c65··"idm1921"><table | |||
| 000404c0:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 000404d0:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 000404e0:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 000404f0:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 00040500:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 00040510:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 00040520:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 00040530:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 00040540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 00040550:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 00040560:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 00040570:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 00040580:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 00040590:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | |||
| 000405a0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 000405b0:·653e·696e·636c·7564·6520·696e·7374·616c··e>include·instal | |||
| 000405c0:·6c5f·6169·6465·0a0a·636c·6173·7320·696e··l_aide..class·in | |||
| 000405d0:·7374·616c·6c5f·6169·6465·207b·0a20·2070··stall_aide·{.··p | |||
| 000405e0:·6163·6b61·6765·207b·2027·6169·6465·273a··ackage·{·'aide': | |||
| 000405f0:·0a20·2020·2065·6e73·7572·6520·3d26·6774··.····ensure·=> | |||
| 00040600:·3b20·2769·6e73·7461·6c6c·6564·272c·0a20··;·'installed',.· | |||
| 00040610:·207d·0a7d·0a3c·2f63·6f64·653e·3c2f·7072···}.}.</code></pr | |||
| 00040620:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 00040630:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 00040640:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 00040650:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 00040660:·6172·6765·743d·2223·6964·6d31·3932·3222··arget="#idm1922" | |||
| 00040670:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 00040680:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 00040690:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 000406a0:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 000406b0:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 000406c0:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 00040 | 000400e0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 00040 | 000400f0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 00040 | 00040100:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 00040 | 00040110:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 00040 | 00040120:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 00040 | 00040130:·643d·2269·646d·3139·3230·223e·3c70·7265··d="idm1920"><pre | ||
| 00040 | 00040140:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 00040 | 00040150:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | ||
| 00040 | 00040160:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | ||
| Max diff block lines reached; 292555/319933 bytes (91.44%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | ··············(RHVH) | 39 | ··············(RHVH) |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 41 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 42 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 43 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 50 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 53 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 409, 14 lines modified | Offset 409, 26 lines modified | ||
| 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 409 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 410 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 411 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 412 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 413 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 414 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 415 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 417 | [[packages]] | ||
| 418 | name·=·"aide" | ||
| 419 | version·=·"*" | ||
| 420 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 421 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 422 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 423 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 424 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 425 | package·--add=aide | ||
| 416 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 426 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 417 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 427 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 418 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 428 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 419 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 429 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 420 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 430 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 421 | -·name:·Ensure·aide·is·installed | 431 | -·name:·Ensure·aide·is·installed |
| 422 | ··package: | 432 | ··package: |
| Offset 430, 31 lines modified | Offset 442, 14 lines modified | ||
| 430 | ··-·PCI-DSSv4-11.5.2 | 442 | ··-·PCI-DSSv4-11.5.2 |
| 431 | ··-·enable_strategy | 443 | ··-·enable_strategy |
| 432 | ··-·low_complexity | 444 | ··-·low_complexity |
| 433 | ··-·low_disruption | 445 | ··-·low_disruption |
| 434 | ··-·medium_severity | 446 | ··-·medium_severity |
| 435 | ··-·no_reboot_needed | 447 | ··-·no_reboot_needed |
| 436 | ··-·package_aide_installed | 448 | ··-·package_aide_installed |
| 437 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 438 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 439 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 440 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 441 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 442 | include·install_aide | ||
| 443 | class·install_aide·{ | ||
| 444 | ··package·{·'aide': | ||
| 445 | ····ensure·=>·'installed', | ||
| 446 | ··} | ||
| 447 | } | ||
| 448 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 449 | [[packages]] | ||
| 450 | name·=·"aide" | ||
| 451 | version·=·"*" | ||
| 452 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 449 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 453 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 450 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 454 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 451 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 455 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 452 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 456 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 453 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 457 | #·Remediation·is·applicable·only·in·certain·platforms | 454 | #·Remediation·is·applicable·only·in·certain·platforms |
| 458 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 455 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 462, 21 lines modified | Offset 457, 26 lines modified | ||
| 462 | if·!·rpm·-q·--quiet·"aide"·;·then | 457 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 463 | ····yum·install·-y·"aide" | 458 | ····yum·install·-y·"aide" |
| 464 | fi | 459 | fi |
| 465 | else | 460 | else |
| 466 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 461 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 467 | fi | 462 | fi |
| 468 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 463 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 469 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 464 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 470 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 465 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 471 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 466 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 472 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 467 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 468 | include·install_aide | ||
| 473 | 469 | class·install_aide·{ | |
| 470 | ··package·{·'aide': | ||
| 471 | ····ensure·=>·'installed', | ||
| 472 | ··} | ||
| 473 | } | ||
| 474 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 474 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 475 | Run·the·following·command·to·generate·a·new·database: | 475 | Run·the·following·command·to·generate·a·new·database: |
| 476 | $·sudo·/usr/sbin/aide·--init | 476 | $·sudo·/usr/sbin/aide·--init |
| 477 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 477 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 478 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 478 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 479 | To·initiate·a·manual·check,·run·the·following·command: | 479 | To·initiate·a·manual·check,·run·the·following·command: |
| 480 | $·sudo·/usr/sbin/aide·--check | 480 | $·sudo·/usr/sbin/aide·--check |
| Offset 6870, 14 lines modified | Offset 6870, 26 lines modified | ||
| 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 6870 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 6871 | Severity: ··medium | 6871 | Severity: ··medium |
| 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 6872 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 6873 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 6874 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 6875 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 6876 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6878 | [[packages]] | ||
| 6879 | name·=·"opensc" | ||
| 6880 | version·=·"*" | ||
| 6881 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6882 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6883 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6884 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6885 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 6886 | package·--add=opensc | ||
| 6877 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 6887 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 6878 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6888 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6879 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6889 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6880 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6890 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6881 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 6891 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 6882 | -·name:·Ensure·opensc·is·installed | 6892 | -·name:·Ensure·opensc·is·installed |
| Max diff block lines reached; 39710/45837 bytes (86.63%) of diff not shown. | |||
| Offset 14302, 16 lines modified | Offset 14302, 16 lines modified | ||
| 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 00037dd0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 00037de0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00037df0:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00037e00:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00037e10:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00037e20:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e30:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e40:·2020·2020·2861·7320·6f66·2032·3032·3 | 00037e40:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00037e50:·303 | 00037e50:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00037e60:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00037e70:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00037e80:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 00037e90:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 00037ea0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 00037eb0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 00037ec0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17050, 201 lines modified | Offset 17050, 201 lines modified | ||
| 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 00042990:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | 000429a0:·646d·3139·3230·2220·7461·6269·6e64·6578··dm1920"·tabindex | ||
| 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000429b0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 000429c0:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 000429d0:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 000429e0:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 000429f0:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042a00:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | |||
| 00042a10:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | |||
| 00042a20:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042a30:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042a40:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042a50:·7365·2220·6964·3d22·6964·6d31·3932·3022··se"·id="idm1920" | |||
| 00042a60:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 00042a70:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 00042a80:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 00042a90:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 00042aa0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00042ab0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042ac0:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042ad0:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042ae0:·7461·7267·6574·3d22·2369·646d·3139·3231··target="#idm1921 | |||
| 00042af0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042b00:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042b10:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042b20:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042b30:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042b40:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042b50:·696f·6e20·416e·6163·6f6e·6461·2073·6e69··ion·Anaconda·sni | |||
| 00042b60:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00042b70:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00042b80:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00042b90:·7073·6522·2069·643d·2269·646d·3139·3231··pse"·id="idm1921 | |||
| 00042ba0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00042bb0:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00042bc0:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00042bd0:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00042be0:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00042bf0:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00042c00:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00042c10:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00042c20:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00042c30:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00042c40:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00042c50:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00042c60:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00042c70:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00042c80:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00042c90:·7072·653e·3c63·6f64·653e·0a70·6163·6b61··pre><code>.packa | |||
| 00042ca0:·6765·202d·2d61·6464·3d61·6964·650a·3c2f··ge·--add=aide.</ | |||
| 00042cb0:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00042cc0:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00042cd0:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00042ce0:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00042cf0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00042d00:·2369·646d·3139·3232·2220·7461·6269·6e64··#idm1922"·tabind | |||
| 00042d10:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 00042d20:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 00042d30:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 00042d40:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 00042d50:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 00042 | 00042d60:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | ||
| 00042 | 00042d70:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | ||
| 00042 | 00042d80:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | ||
| 00042 | 00042d90:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | ||
| 00042 | 00042da0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | ||
| 00042 | 00042db0:·6964·6d31·3932·3222·3e3c·7461·626c·6520··idm1922"><table· | ||
| 00042 | 00042dc0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | ||
| 00042 | 00042dd0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | ||
| 00042 | 00042de0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | ||
| 00042 | 00042df0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | ||
| 00042 | 00042e00:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | ||
| 00042 | 00042e10:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | ||
| 00042 | 00042e20:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | ||
| 00042 | 00042e30:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | ||
| 00042 | 00042e40:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | ||
| 00042 | 00042e50:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | ||
| 00042 | 00042e60:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | ||
| 00042 | 00042e70:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | ||
| 00042 | 00042e80:·7465·6779·3a3c·2f74·683e·3c74·643e·656e··tegy:</th><td>en | ||
| 00042 | 00042e90:·6162·6c65·3c2f·7464·3e3c·2f74·723e·3c2f··able</td></tr></ | ||
| 00042 | 00042ea0:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | ||
| 00042 | 00042eb0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | ||
| 00042 | 00042ec0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | ||
| 00042 | 00042ed0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | ||
| 00042 | 00042ee0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | ||
| 00042 | 00042ef0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | ||
| 00042 | 00042f00:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | ||
| 00042 | 00042f10:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | ||
| 00042 | 00042f20:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | ||
| 00042 | 00042f30:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | ||
| 00042 | 00042f40:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | ||
| 00042 | 00042f50:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | ||
| 00042 | 00042f60:·6167·733a·0a20·202d·2043·4a49·532d·352e··ags:.··-·CJIS-5. | ||
| 00042 | 00042f70:·3130·2e31·2e33·0a20·202d·204e·4953·542d··10.1.3.··-·NIST- | ||
| 00042 | 00042f80:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | ||
| 00042 | 00042f90:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | ||
| 00042 | 00042fa0:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | ||
| 00042 | 00042fb0:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | ||
| 00042c6 | 00042fc0:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | ||
| 00042 | 00042fd0:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | ||
| 00042 | 00042fe0:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | ||
| 00042 | 00042ff0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | ||
| 0004 | 00043000:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | ||
| 0004 | 00043010:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | ||
| 00042 | 00043020:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | ||
| 0004 | 00043030:·7461·6c6c·6564·0a3c·2f63·6f64·653e·3c2f··talled.</code></ | ||
| 0004 | 00043040:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | ||
| 0004 | 00043050:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | ||
| 0004 | 00043060:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | ||
| Max diff block lines reached; 1228635/1256289 bytes (97.80%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DRAFT·-·DISA·STIG·for·Red·Hat·Virtualization·Host·(RHVH) |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 41 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 42 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 552, 14 lines modified | Offset 552, 26 lines modified | ||
| 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 | 552 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.11.2.4,·A.12.1.2,·A.12.2.1,·A.12.4.1,·A.12.5.1,·A.12.6.2,·A.14.1.2,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4,·A.14.2.7,·A.15.2.1,·A.8.2.3 |
| 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 553 | ············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 | 554 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-7,·PR.DS-1,·PR.DS-6,·PR.DS-8,·PR.IP-1,·PR.IP-3 |
| 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 555 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 556 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 557 | ············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 558 | ············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 560 | [[packages]] | ||
| 561 | name·=·"aide" | ||
| 562 | version·=·"*" | ||
| 563 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 564 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 565 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 566 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 567 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 568 | package·--add=aide | ||
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 569 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 570 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 571 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 572 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 573 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 564 | -·name:·Ensure·aide·is·installed | 574 | -·name:·Ensure·aide·is·installed |
| 565 | ··package: | 575 | ··package: |
| Offset 573, 31 lines modified | Offset 585, 14 lines modified | ||
| 573 | ··-·PCI-DSSv4-11.5.2 | 585 | ··-·PCI-DSSv4-11.5.2 |
| 574 | ··-·enable_strategy | 586 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 587 | ··-·low_complexity |
| 576 | ··-·low_disruption | 588 | ··-·low_disruption |
| 577 | ··-·medium_severity | 589 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 590 | ··-·no_reboot_needed |
| 579 | ··-·package_aide_installed | 591 | ··-·package_aide_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 585 | include·install_aide | ||
| 586 | class·install_aide·{ | ||
| 587 | ··package·{·'aide': | ||
| 588 | ····ensure·=>·'installed', | ||
| 589 | ··} | ||
| 590 | } | ||
| 591 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 592 | [[packages]] | ||
| 593 | name·=·"aide" | ||
| 594 | version·=·"*" | ||
| 595 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 592 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 596 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 593 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 597 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 594 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 598 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 595 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 599 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 596 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 600 | #·Remediation·is·applicable·only·in·certain·platforms | 597 | #·Remediation·is·applicable·only·in·certain·platforms |
| 601 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 598 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 605, 21 lines modified | Offset 600, 26 lines modified | ||
| 605 | if·!·rpm·-q·--quiet·"aide"·;·then | 600 | if·!·rpm·-q·--quiet·"aide"·;·then |
| 606 | ····yum·install·-y·"aide" | 601 | ····yum·install·-y·"aide" |
| 607 | fi | 602 | fi |
| 608 | else | 603 | else |
| 609 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 604 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 610 | fi | 605 | fi |
| 611 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 606 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 612 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 607 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 613 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 608 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 614 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 609 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 615 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 610 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 611 | include·install_aide | ||
| 616 | 612 | class·install_aide·{ | |
| 613 | ··package·{·'aide': | ||
| 614 | ····ensure·=>·'installed', | ||
| 615 | ··} | ||
| 616 | } | ||
| 617 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 617 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 618 | Run·the·following·command·to·generate·a·new·database: | 618 | Run·the·following·command·to·generate·a·new·database: |
| 619 | $·sudo·/usr/sbin/aide·--init | 619 | $·sudo·/usr/sbin/aide·--init |
| 620 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: | 620 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.gz.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/sbin/aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| 621 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz | 621 | $·sudo·cp·/var/lib/aide/aide.db.new.gz·/var/lib/aide/aide.db.gz |
| 622 | To·initiate·a·manual·check,·run·the·following·command: | 622 | To·initiate·a·manual·check,·run·the·following·command: |
| 623 | $·sudo·/usr/sbin/aide·--check | 623 | $·sudo·/usr/sbin/aide·--check |
| Offset 1300, 14 lines modified | Offset 1300, 18 lines modified | ||
| 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 1300 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 1301 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 1302 | ············_\x8i_\x8s_\x8m······1446 | 1302 | ············_\x8i_\x8s_\x8m······1446 |
| 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 1303 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 1304 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 1305 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 1306 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1308 | [customizations] | ||
| 1309 | fips·=·true | ||
| 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1310 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 1311 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 1309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 1312 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 1310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 1313 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 1311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 1314 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 1312 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 1315 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 1313 | ··set_fact: | 1316 | ··set_fact: |
| Offset 1403, 18 lines modified | Offset 1407, 14 lines modified | ||
| 1403 | ··-·NIST-800-53-SC-13 | 1407 | ··-·NIST-800-53-SC-13 |
| 1404 | ··-·enable_fips_mode | 1408 | ··-·enable_fips_mode |
| 1405 | ··-·high_severity | 1409 | ··-·high_severity |
| 1406 | ··-·medium_complexity | 1410 | ··-·medium_complexity |
| 1407 | ··-·medium_disruption | 1411 | ··-·medium_disruption |
| 1408 | ··-·reboot_required | 1412 | ··-·reboot_required |
| Max diff block lines reached; 147751/153842 bytes (96.04%) of diff not shown. | |||
| Offset 14383, 16 lines modified | Offset 14383, 16 lines modified | ||
| 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | 000382e0:·6973·696f·6e20·4869·7374·6f72·793c·2f68··ision·History</h | ||
| 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | 000382f0:·323e·3c70·3e43·7572·7265·6e74·2076·6572··2><p>Current·ver | ||
| 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | 00038300:·7369·6f6e·3a20·3c73·7472·6f6e·673e·302e··sion:·<strong>0. | ||
| 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | 00038310:·312e·3734·3c2f·7374·726f·6e67·3e3c·2f70··1.74</strong></p | ||
| 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | 00038320:·3e3c·756c·3e3c·6c69·3e3c·7374·726f·6e67··><ul><li><strong | ||
| 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | 00038330:·3e64·7261·6674·3c2f·7374·726f·6e67·3e0a··>draft</strong>. | ||
| 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00038340:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00038350:·2020·2020·2861·7320·6f66·2032·3032·3 | 00038350:·2020·2020·2861·7320·6f66·2032·3032·352d······(as·of·2025- | ||
| 00038360:·303 | 00038360:·3031·2d32·3329·0a20·2020·2020·2020·2020··01-23).········· | ||
| 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | 00038370:·2020·2020·2020·203c·2f6c·693e·3c2f·756c·········</li></ul | ||
| 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | 00038380:·3e3c·2f64·6976·3e3c·6832·3e54·6162·6c65··></div><h2>Table | ||
| 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | 00038390:·206f·6620·436f·6e74·656e·7473·3c2f·6832···of·Contents</h2 | ||
| 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | 000383a0:·3e3c·6f6c·3e3c·6c69·3e3c·6120·6872·6566··><ol><li><a·href | ||
| 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | 000383b0:·3d22·2378·6363·6466·5f6f·7267·2e73·7367··="#xccdf_org.ssg | ||
| 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | 000383c0:·7072·6f6a·6563·742e·636f·6e74·656e·745f··project.content_ | ||
| 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | 000383d0:·6772·6f75·705f·7379·7374·656d·223e·5379··group_system">Sy | ||
| Offset 17125, 256 lines modified | Offset 17125, 256 lines modified | ||
| 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | 00042e40:·7365·2220·6461·7461·2d74·6172·6765·743d··se"·data-target= | ||
| 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | 00042e50:·2223·6964·6d32·3339·3622·2074·6162·696e··"#idm2396"·tabin | ||
| 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 00042e60:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 00042e70:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 00042e80:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 00042e90:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 00042ea0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 00042eb0:·3e52·656d·6564·6961·7469·6f6e·204 | 00042eb0:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 00042ec0:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | |||
| 00042ed0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00042ee0:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00042ef0:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 00042f00:·6c61·7073·6522·2069·643d·2269·646d·3233··lapse"·id="idm23 | |||
| 00042f10:·3936·223e·3c70·7265·3e3c·636f·6465·3e0a··96"><pre><code>. | |||
| 00042f20:·5b63·7573·746f·6d69·7a61·7469·6f6e·735d··[customizations] | |||
| 00042f30:·0a66·6970·7320·3d20·7472·7565·0a3c·2f63··.fips·=·true.</c | |||
| 00042f40:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 00042f50:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 00042f60:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 00042f70:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 00042f80:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 00042f90:·6964·6d32·3339·3722·2074·6162·696e·6465··idm2397"·tabinde | |||
| 00042fa0:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | |||
| 00042fb0:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | |||
| 00042fc0:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | |||
| 00042fd0:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | |||
| 00042fe0:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | |||
| 00042ff0:·656d·6564·6961·7469·6f6e·2041·6e73·6962··emediation·Ansib | |||
| 0004 | 00043000:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | ||
| 0004 | 00043010:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | ||
| 0004 | 00043020:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | ||
| 0004 | 00043030:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | ||
| 0004 | 00043040:·646d·3233·3937·223e·3c74·6162·6c65·2063··dm2397"><table·c | ||
| 0004 | 00043050:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | ||
| 0004 | 00043060:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | ||
| 0004 | 00043070:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | ||
| 0004 | 00043080:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | ||
| 0004 | 00043090:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | ||
| 0004 | 000430a0:·683e·3c74·643e·6d65·6469·756d·3c2f·7464··h><td>medium</td | ||
| 000430b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000430c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000430d0:·643e·6d65·6469·756d·3c2f·7464·3e3c·2f74··d>medium</td></t | |||
| 000430e0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 000430f0:·3a3c·2f74·683e·3c74·643e·7472·7565·3c2f··:</th><td>true</ | |||
| 0004 | 00043100:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | ||
| 00042f80:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 00042f90:·3c74·643e·6d65·6469·756d·3c2f·7464·3e3c··<td>medium</td>< | |||
| 00042fa0:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 00042fb0:·6f74·3a3c·2f74·683e·3c74·643e·7472·7565··ot:</th><td>true | |||
| 00042fc0:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0004 | 00043110:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | ||
| 0004 | 00043120:·643e·7265·7374·7269·6374·3c2f·7464·3e3c··d>restrict</td>< | ||
| 0004 | 00043130:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | ||
| 00043 | 00043140:·3e3c·636f·6465·3e2d·206e·616d·653a·2058··><code>-·name:·X | ||
| 00043 | 00043150:·4343·4446·2056·616c·7565·2076·6172·5f73··CCDF·Value·var_s | ||
| 00043 | 00043160:·7973·7465·6d5f·6372·7970·746f·5f70·6f6c··ystem_crypto_pol | ||
| 00043 | 00043170:·6963·7920·2320·7072·6f6d·6f74·6520·746f··icy·#·promote·to | ||
| 00043 | 00043180:·2076·6172·6961·626c·650a·2020·7365·745f···variable.··set_ | ||
| 00043 | 00043190:·6661·6374·3a0a·2020·2020·7661·725f·7379··fact:.····var_sy | ||
| 00043 | 000431a0:·7374·656d·5f63·7279·7074·6f5f·706f·6c69··stem_crypto_poli | ||
| 00043 | 000431b0:·6379·3a20·2121·7374·7220·3c61·6262·7220··cy:·!!str·<abbr· | ||
| 00043 | 000431c0:·7469·746c·653d·2266·726f·6d20·5072·6f66··title="from·Prof | ||
| 00043 | 000431d0:·696c·652f·7265·6669·6e65·2d76·616c·7565··ile/refine-value | ||
| 00043 | 000431e0:·3a20·7863·6364·665f·6f72·672e·7373·6770··:·xccdf_org.ssgp | ||
| 00043 | 000431f0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f76··roject.content_v | ||
| 00043 | 00043200:·616c·7565·5f76·6172·5f73·7973·7465·6d5f··alue_var_system_ | ||
| 00043 | 00043210:·6372·7970·746f·5f70·6f6c·6963·7922·3e46··crypto_policy">F | ||
| 00043 | 00043220:·4950·533a·4f53·5050·3c2f·6162·6272·3e0a··IPS:OSPP</abbr>. | ||
| 00043 | 00043230:·2020·7461·6773·3a0a·2020·2020·2d20·616c····tags:.····-·al | ||
| 00043 | 00043240:·7761·7973·0a0a·2d20·6e61·6d65·3a20·456e··ways..-·name:·En | ||
| 00043 | 00043250:·6162·6c65·2046·4950·5320·4d6f·6465·202d··able·FIPS·Mode·- | ||
| 00043 | 00043260:·2043·6865·636b·2074·6f20·5365·6520·7468···Check·to·See·th | ||
| 00043 | 00043270:·6520·4375·7272·656e·7420·5374·6174·7573··e·Current·Status | ||
| 00043 | 00043280:·206f·6620·4649·5053·204d·6f64·650a·2020···of·FIPS·Mode.·· | ||
| 00043 | 00043290:·616e·7369·626c·652e·6275·696c·7469·6e2e··ansible.builtin. | ||
| 00043 | 000432a0:·636f·6d6d·616e·643a·202f·7573·722f·6269··command:·/usr/bi | ||
| 00043 | 000432b0:·6e2f·6669·7073·2d6d·6f64·652d·7365·7475··n/fips-mode-setu | ||
| 00043 | 000432c0:·7020·2d2d·6368·6563·6b0a·2020·7265·6769··p·--check.··regi | ||
| 00043 | 000432d0:·7374·6572·3a20·6973·5f66·6970·735f·656e··ster:·is_fips_en | ||
| 00043 | 000432e0:·6162·6c65·640a·2020·6661·696c·6564·5f77··abled.··failed_w | ||
| 00043 | 000432f0:·6865·6e3a·2066·616c·7365·0a20·2063·6861··hen:·false.··cha | ||
| 00043 | 00043300:·6e67·6564·5f77·6865·6e3a·2066·616c·7365··nged_when:·false | ||
| 00043 | 00043310:·0a20·2077·6865·6e3a·0a20·202d·2028·2061··.··when:.··-·(·a | ||
| 00043 | 00043320:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | ||
| 00043 | 00043330:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | ||
| 00043200:·2069·6e20·5b22·646f·636b·6572·222c·2022···in·["docker",·" | |||
| 00043210:·6c78·6322·2c20·226f·7065·6e76·7a22·2c20··lxc",·"openvz",· | |||
| 00043220:·2270·6f64·6d61·6e22·2c20·2263·6f6e·7461··"podman",·"conta | |||
| 00043230:·696e·6572·225d·0a20·2020·2061·6e64·206e··iner"].····and·n | |||
| 00043240:·6f74·2028·206c·6f6f·6b75·7028·2265·6e76··ot·(·lookup("env | |||
| 00043250:·222c·2022·636f·6e74·6169·6e65·7222·2920··",·"container")· | |||
| 00043260:·3d3d·2022·6277·7261·702d·6f73·6275·696c··==·"bwrap-osbuil | |||
| 00043270:·6422·2029·2029·0a20·202d·2061·6e73·6962··d"·)·).··-·ansib | |||
| 00043280:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 00043290:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 000432a0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 000432b0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 000432c0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 000432d0:·0a20·2074·6167·733a·0a20·202d·204e·4953··.··tags:.··-·NIS | |||
| 000432e0:·542d·3830·302d·3533·2d43·4d2d·3328·3629··T-800-53-CM-3(6) | |||
| 000432f0:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 00043300:·2d43·4d2d·3628·6129·0a20·202d·204e·4953··-CM-6(a).··-·NIS | |||
| 00043310:·542d·3830·302d·3533·2d49·412d·370a·2020··T-800-53-IA-7.·· | |||
| 00043320:·2d20·4e49·5354·2d38·3030·2d35·332d·5343··-·NIST-800-53-SC | |||
| 00043330:·2d31·320a·2020·2d20·4e49·5354·2d38·3030··-12.··-·NIST-800 | |||
| 00043340:·2d35·332d·5343·2d31·3228·3229·0a20·202d··-53-SC-12(2).··- | |||
| 00043350:·204e·4953·542d·3830·302d·3533·2d53·432d···NIST-800-53-SC- | |||
| 00043360:·3132·2833·290a·2020·2d20·4e49·5354·2d38··12(3).··-·NIST-8 | |||
| 00043370:·3030·2d35·332d·5343·2d31·330a·2020·2d20··00-53-SC-13.··-· | |||
| 00043380:·656e·6162·6c65·5f66·6970·735f·6d6f·6465··enable_fips_mode | |||
| Max diff block lines reached; 332901/368145 bytes (90.43%) of diff not shown. | |||
| Offset 59, 15 lines modified | Offset 59, 15 lines modified | ||
| 59 | ··············Virtualization·Host·(RHVH) | 59 | ··············Virtualization·Host·(RHVH) |
| 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp | 60 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_rhvh-vpp |
| 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 61 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor | 62 | ····*·cpe:/o:redhat:enterprise_linux:8::hypervisor |
| 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 | 63 | ····*·cpe:/a:redhat:enterprise_virtualization_manager:4 |
| 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 64 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 65 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 66 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 67 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 68 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 69 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 70 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 71 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 72 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 73 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 566, 14 lines modified | Offset 566, 18 lines modified | ||
| 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode | 566 | Rule·ID:····xccdf_org.ssgproject.content_rule_enable_fips_mode |
| 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 | 567 | ············_\x8d_\x8i_\x8s_\x8a·····CCI-000068,·CCI-000803,·CCI-002450 |
| 568 | ············_\x8i_\x8s_\x8m······1446 | 568 | ············_\x8i_\x8s_\x8m······1446 |
| 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 | 569 | References:·_\x8n_\x8e_\x8r_\x8c_\x8-_\x8c_\x8i_\x8p·CIP-003-8·R4.2,·CIP-007-3·R5.1 |
| 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 | 570 | ············_\x8n_\x8i_\x8s_\x8t·····CM-3(6),·SC-12(2),·SC-12(3),·IA-7,·SC-13,·CM-6(a),·SC-12 |
| 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 | 571 | ············_\x8o_\x8s_\x8p_\x8p·····FCS_COP.1(1),·FCS_COP.1(2),·FCS_COP.1(3),·FCS_COP.1(4),·FCS_CKM.1,·FCS_CKM.2,·FCS_TLSC_EXT.1,·FCS_RBG_EXT.1 |
| 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 | 572 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g···SRG-OS-000478-GPOS-00223,·SRG-OS-000396-GPOS-00176 |
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 574 | [customizations] | ||
| 575 | fips·=·true | ||
| 573 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 576 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 574 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium | 577 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·medium |
| 575 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium | 578 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·medium |
| 576 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true | 579 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····true |
| 577 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict | 580 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···restrict |
| 578 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable | 581 | -·name:·XCCDF·Value·var_system_crypto_policy·#·promote·to·variable |
| 579 | ··set_fact: | 582 | ··set_fact: |
| Offset 669, 18 lines modified | Offset 673, 14 lines modified | ||
| 669 | ··-·NIST-800-53-SC-13 | 673 | ··-·NIST-800-53-SC-13 |
| 670 | ··-·enable_fips_mode | 674 | ··-·enable_fips_mode |
| 671 | ··-·high_severity | 675 | ··-·high_severity |
| 672 | ··-·medium_complexity | 676 | ··-·medium_complexity |
| 673 | ··-·medium_disruption | 677 | ··-·medium_disruption |
| 674 | ··-·reboot_required | 678 | ··-·reboot_required |
| 675 | ··-·restrict_strategy | 679 | ··-·restrict_strategy |
| 676 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 677 | [customizations] | ||
| 678 | fips·=·true | ||
| 679 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 680 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 680 | #·Remediation·is·applicable·only·in·certain·platforms | 681 | #·Remediation·is·applicable·only·in·certain·platforms |
| 681 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then | 682 | if·(·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·]·&&·!·(·[·"${container:-}"·==·"bwrap-osbuild"·]·)·)·&&·{·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·};·then |
| 682 | var_system_crypto_policy='FIPS:OSPP' | 683 | var_system_crypto_policy='FIPS:OSPP' |
| Offset 8369, 14 lines modified | Offset 8369, 26 lines modified | ||
| 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. | 8369 | ············Multifactor·solutions·that·require·devices·separate·from·information·systems·gaining·access·include,·for·example,·hardware·tokens·providing·time-based·or·challenge-response·authenticators·and·smart·cards·such·as·the·U.S.·Government·Personal·Identity·Verification·card·and·the·DoD·Common·Access·Card. |
| 8370 | Severity: ··medium | 8370 | Severity: ··medium |
| 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed | 8371 | Rule·ID:····xccdf_org.ssgproject.content_rule_package_opensc_installed |
| 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 | 8372 | ············_\x8d_\x8i_\x8s_\x8a···CCI-001954,·CCI-001953 |
| 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 | 8373 | References:·_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) | 8374 | ············_\x8n_\x8i_\x8s_\x8t···CM-6(a) |
| 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 | 8375 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160,·SRG-OS-000376-GPOS-00161 |
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8377 | [[packages]] | ||
| 8378 | name·=·"opensc" | ||
| 8379 | version·=·"*" | ||
| 8380 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8a_\x8c_\x8o_\x8n_\x8d_\x8a_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8381 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8382 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8383 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8384 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8385 | package·--add=opensc | ||
| 8376 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8386 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8377 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8387 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8378 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8388 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8379 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8389 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8380 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8390 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8381 | -·name:·Ensure·opensc·is·installed | 8391 | -·name:·Ensure·opensc·is·installed |
| 8382 | ··package: | 8392 | ··package: |
| Offset 8387, 31 lines modified | Offset 8399, 14 lines modified | ||
| 8387 | ··-·NIST-800-53-CM-6(a) | 8399 | ··-·NIST-800-53-CM-6(a) |
| 8388 | ··-·enable_strategy | 8400 | ··-·enable_strategy |
| 8389 | ··-·low_complexity | 8401 | ··-·low_complexity |
| 8390 | ··-·low_disruption | 8402 | ··-·low_disruption |
| 8391 | ··-·medium_severity | 8403 | ··-·medium_severity |
| 8392 | ··-·no_reboot_needed | 8404 | ··-·no_reboot_needed |
| 8393 | ··-·package_opensc_installed | 8405 | ··-·package_opensc_installed |
| 8394 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8395 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8396 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8397 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8398 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8399 | include·install_opensc | ||
| 8400 | class·install_opensc·{ | ||
| 8401 | ··package·{·'opensc': | ||
| 8402 | ····ensure·=>·'installed', | ||
| 8403 | ··} | ||
| 8404 | } | ||
| 8405 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8406 | [[packages]] | ||
| 8407 | name·=·"opensc" | ||
| 8408 | version·=·"*" | ||
| 8409 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 8406 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 8410 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8407 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8411 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8408 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8412 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8409 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8413 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8410 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8414 | #·Remediation·is·applicable·only·in·certain·platforms | 8411 | #·Remediation·is·applicable·only·in·certain·platforms |
| 8415 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 8412 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 8419, 31 lines modified | Offset 8414, 48 lines modified | ||
| 8419 | if·!·rpm·-q·--quiet·"opensc"·;·then | 8414 | if·!·rpm·-q·--quiet·"opensc"·;·then |
| 8420 | ····yum·install·-y·"opensc" | 8415 | ····yum·install·-y·"opensc" |
| 8421 | fi | 8416 | fi |
| 8422 | else | 8417 | else |
| 8423 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 8418 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 8424 | fi | 8419 | fi |
| 8425 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8 | 8420 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_.u_.p_.p_.e_.t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8426 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8421 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8427 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8422 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8428 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8423 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8429 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8424 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8425 | include·install_opensc | ||
| Max diff block lines reached; 42819/48894 bytes (87.58%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 167 lines modified | Offset 15134, 167 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b320:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | ||
| 0003b | 0003b330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5d | 0003b360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b | 0003b380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b | 0003b3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b630:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b640:·3533·3930·223e·3c74·6162·6c65·2063·6c61··5390"><table·cla | |||
| 0003b650:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b660:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b670:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b680:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b | 0003b3d0:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | ||
| 0003b3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b430:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b440:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b450:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b | 0003b460:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b6b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b470:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b480:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b490:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b6e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b6f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b700:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b710:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b720:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b730:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b740:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b750:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b760:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| Max diff block lines reached; 656406/679230 bytes (96.64%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 185 | generated·database·can·be·installed·as·follows: |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | -·name:·Ensure·sudo·is·installed | 569 | -·name:·Ensure·sudo·is·installed |
| 566 | ··package: | 570 | ··package: |
| Offset 573, 44 lines modified | Offset 578, 39 lines modified | ||
| 573 | ··-·PCI-DSSv4-2.2.6 | 578 | ··-·PCI-DSSv4-2.2.6 |
| 574 | ··-·enable_strategy | 579 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 580 | ··-·low_complexity |
| 576 | ··-·low_disruption | 581 | ··-·low_disruption |
| 577 | ··-·medium_severity | 582 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 583 | ··-·no_reboot_needed |
| 579 | ··-·package_sudo_installed | 584 | ··-·package_sudo_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 585 | include·install_sudo | ||
| Max diff block lines reached; 68635/74148 bytes (92.56%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 168 lines modified | Offset 15139, 168 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | 0003b230:·3338·3922·2074·6162·696e·6465·783d·2230··389"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·204 | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2 | 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3533·3839·223e·3c70···id="idm5389"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b340:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b350:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b360:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b370:·6765·743d·2223·6964·6d35·3339·3022·2074··get="#idm5390"·t | |||
| 0003b380:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b390:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b3e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b3f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b400:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b410:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b420:·2069·643d·2269·646d·3533·3930·223e·3c74···id="idm5390"><t | |||
| 0003b430:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b440:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b450:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b460:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b470:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b480:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b4b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b500:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b510:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b520:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b530:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b540:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b550:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b560:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b570:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b580:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b590:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b5a0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b5b0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b5c0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b5d0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | |||
| 0003b5e0:·452d·3833·3036·372d·390a·2020·2d20·434a··E-83067-9.··-·CJ | |||
| 0003b5f0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b600:·4449·5341·2d53·5449·472d·534c·4553·2d31··DISA-STIG-SLES-1 | |||
| 0003b610:·322d·3031·3034·3939·0a20·202d·204e·4953··2-010499.··-·NIS | |||
| 0003b620:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b630:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b640:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b650:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b660:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b670:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b680:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b690:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b6a0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b6b0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b6c0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b6d0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b6e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b6f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b700:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b | 0003b710:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3533··lapse"·id="idm53 | |||
| 0003b2e0:·3839·223e·3c74·6162·6c65·2063·6c61·7373··89"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b | 0003b720:·7461·2d74·6172·6765·743d·2223·6964·6d35··ta-target="#idm5 | ||
| 0003b730:·3339·3122·2074·6162·696e·6465·783d·2230··391"·tabindex="0 | |||
| 0003b740:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b750:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b760:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b770:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b780:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b790:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b7a0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b7b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b7c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7d0:·7365·2220·6964·3d22·6964·6d35·3339·3122··se"·id="idm5391" | |||
| 0003b7e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b7f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b | 0003b800:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b810:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b820:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b830:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b840:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b850:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b880:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| Max diff block lines reached; 698172/721134 bytes (96.82%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 146, 44 lines modified | Offset 151, 39 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | include·install_aide | ||
| 159 | class·install_aide·{ | ||
| 160 | ··package·{·'aide': | ||
| 161 | ····ensure·=>·'installed', | ||
| 162 | ··} | ||
| 163 | } | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 175 | zypper·install·-y·"aide" | 165 | zypper·install·-y·"aide" |
| 176 | else | 166 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 168 | fi |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 182 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 184 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 185 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 185 | generated·database·can·be·installed·as·follows: | 186 | generated·database·can·be·installed·as·follows: |
| Offset 1293, 14 lines modified | Offset 1293, 19 lines modified | ||
| 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1293 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1294 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1295 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1296 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1297 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1298 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1299 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1301 | [[packages]] | ||
| 1302 | name·=·"sudo" | ||
| 1303 | version·=·"*" | ||
| 1300 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1301 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1302 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1303 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1304 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1305 | -·name:·Ensure·sudo·is·installed | 1309 | -·name:·Ensure·sudo·is·installed |
| 1306 | ··package: | 1310 | ··package: |
| Offset 1313, 44 lines modified | Offset 1318, 39 lines modified | ||
| 1313 | ··-·PCI-DSSv4-2.2.6 | 1318 | ··-·PCI-DSSv4-2.2.6 |
| 1314 | ··-·enable_strategy | 1319 | ··-·enable_strategy |
| 1315 | ··-·low_complexity | 1320 | ··-·low_complexity |
| 1316 | ··-·low_disruption | 1321 | ··-·low_disruption |
| 1317 | ··-·medium_severity | 1322 | ··-·medium_severity |
| 1318 | ··-·no_reboot_needed | 1323 | ··-·no_reboot_needed |
| 1319 | ··-·package_sudo_installed | 1324 | ··-·package_sudo_installed |
| 1320 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1321 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1322 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1323 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1324 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1325 | include·install_sudo | ||
| Max diff block lines reached; 74831/80352 bytes (93.13%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 167 lines modified | Offset 15125, 167 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d35·3338··-target="#idm538 | ||
| 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | 0003b150:·3922·2074·6162·696e·6465·783d·2230·2220··9"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b230:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b | 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3533·3839·223e·3c70·7265··d="idm5389"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b250:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b260:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b270:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b290:·743d·2223·6964·6d35·3339·3022·2074·6162··t="#idm5390"·tab | |||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b400:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b410:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b420:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b430:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b440:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b450:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b460:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b470:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b480:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b490:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4 | 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3036·372d·390a·2020·2d20·434a·4953··83067-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·322d··SA-STIG-SLES-12- | |||
| 0003b530:·3031·3034·3939·0a20·202d·204e·4953·542d··010499.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| Max diff block lines reached; 488952/511776 bytes (95.54%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | -·name:·Ensure·sudo·is·installed | 549 | -·name:·Ensure·sudo·is·installed |
| 546 | ··package: | 550 | ··package: |
| Offset 553, 44 lines modified | Offset 558, 39 lines modified | ||
| 553 | ··-·PCI-DSSv4-2.2.6 | 558 | ··-·PCI-DSSv4-2.2.6 |
| 554 | ··-·enable_strategy | 559 | ··-·enable_strategy |
| 555 | ··-·low_complexity | 560 | ··-·low_complexity |
| 556 | ··-·low_disruption | 561 | ··-·low_disruption |
| 557 | ··-·medium_severity | 562 | ··-·medium_severity |
| 558 | ··-·no_reboot_needed | 563 | ··-·no_reboot_needed |
| 559 | ··-·package_sudo_installed | 564 | ··-·package_sudo_installed |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 565 | include·install_sudo | ||
| Max diff block lines reached; 48962/54593 bytes (89.69%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 146 lines modified | Offset 14793, 146 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3133··-target="#idm813 | ||
| 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | 00039c90:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3831·3330··pse"·id="idm8130 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039e50:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039e60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3437·362d··:.··-·CCE-91476- | |||
| 00039eb0:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039f20:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 00039f30:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039f40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f80:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039f90:·3133·3122·2074·6162·696e·6465·783d·2230··131"·tabindex="0 | |||
| 00039fa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039fb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039fc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039ff0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003a000:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a010:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a020:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a030:·6170·7365·2220·6964·3d22·6964·6d38·3133··apse"·id="idm813 | |||
| 0003a040:·3122·3e3c·7461·626c·6520·636c·6173·733d··1"><table·class= | |||
| 0003a050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a060:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a070:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a080:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a090:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a0a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a0b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a0c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a0e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a0f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a100:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a110:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a120:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a130:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003a140:·6465·2069·6e73·7461·6c6c·5f64·6e66·2d61··de·install_dnf-a | |||
| 0003a150:·7574·6f6d·6174·6963·0a0a·636c·6173·7320··utomatic..class· | |||
| 0003a160:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a170:·6d61·7469·6320·7b0a·2020·7061·636b·6167··matic·{.··packag | |||
| 0003a180:·6520·7b20·2764·6e66·2d61·7574·6f6d·6174··e·{·'dnf-automat | |||
| 0003a190:·6963·273a·0a20·2020·2065·6e73·7572·6520··ic':.····ensure· | |||
| 0003a1a0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003a1b0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003a1c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a1d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a1e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a1f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a200:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003a210:·3133·3222·2074·6162·696e·6465·783d·2230··132"·tabindex="0 | |||
| 0003a220:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a230:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a240:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a250:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a260:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003 | 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003 | 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 0003 | 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 00039d40:·643d·2269·646d·3831·3330·223e·3c70·7265··d="idm8130"><pre | ||
| 0003 | 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003 | 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | ||
| 0003 | 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | ||
| 0003 | 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | ||
| 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039de0:·3831·3331·2220·7461·6269·6e64·6578·3d22··8131"·tabindex=" | |||
| Max diff block lines reached; 151590/171516 bytes (88.38%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91476-2 | 91 | Identifiers:·CCE-91476-2 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | -·name:·Ensure·dnf-automatic·is·installed | 103 | -·name:·Ensure·dnf-automatic·is·installed |
| 100 | ··package: | 104 | ··package: |
| Offset 104, 38 lines modified | Offset 109, 33 lines modified | ||
| 104 | ··-·CCE-91476-2 | 109 | ··-·CCE-91476-2 |
| 105 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 106 | ··-·low_complexity | 111 | ··-·low_complexity |
| 107 | ··-·low_disruption | 112 | ··-·low_disruption |
| 108 | ··-·medium_severity | 113 | ··-·medium_severity |
| 109 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 110 | ··-·package_dnf-automatic_installed | 115 | ··-·package_dnf-automatic_installed |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | zypper·install·-y·"dnf-automatic" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | include·install_dnf-automatic | 127 | include·install_dnf-automatic |
| 117 | class·install_dnf-automatic·{ | 128 | class·install_dnf-automatic·{ |
| 118 | ··package·{·'dnf-automatic': | 129 | ··package·{·'dnf-automatic': |
| 119 | ····ensure·=>·'installed', | 130 | ····ensure·=>·'installed', |
| 120 | ··} | 131 | ··} |
| 121 | } | 132 | } |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"dnf-automatic" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | zypper·install·-y·"dnf-automatic" | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 135 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 136 | automatic.conf. |
| 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 137 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 138 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 139 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 6988, 39 lines modified | Offset 6988, 39 lines modified | ||
| 6988 | ··-·PCI-DSSv4-2.2.4 | 6988 | ··-·PCI-DSSv4-2.2.4 |
| 6989 | ··-·disable_strategy | 6989 | ··-·disable_strategy |
| 6990 | ··-·low_complexity | 6990 | ··-·low_complexity |
| 6991 | ··-·low_disruption | 6991 | ··-·low_disruption |
| 6992 | ··-·medium_severity | 6992 | ··-·medium_severity |
| 6993 | ··-·no_reboot_needed | 6993 | ··-·no_reboot_needed |
| 6994 | ··-·package_dhcp_removed | 6994 | ··-·package_dhcp_removed |
| 6995 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6996 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6997 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6998 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6999 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 7000 | include·remove_dhcp-server | ||
| 7001 | class·remove_dhcp-server·{ | ||
| 7002 | ··package·{·'dhcp-server': | ||
| 7003 | ····ensure·=>·'purged', | ||
| 7004 | ··} | ||
| 7005 | } | ||
| 7006 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 6995 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 7007 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6996 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7008 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6997 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7009 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6998 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7010 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 6999 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 7011 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 7000 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| 7012 | #» ···from·the·system,·and·may·remove·any·packages | 7001 | #» ···from·the·system,·and·may·remove·any·packages |
| 7013 | #» ···that·depend·on·dhcp-server.·Execute·this | 7002 | #» ···that·depend·on·dhcp-server.·Execute·this |
| 7014 | #» ···remediation·AFTER·testing·on·a·non-production | 7003 | #» ···remediation·AFTER·testing·on·a·non-production |
| 7015 | #» ···system! | 7004 | #» ···system! |
| 7016 | zypper·remove·-y·"dhcp-server" | 7005 | zypper·remove·-y·"dhcp-server" |
| 7006 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7007 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7008 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7009 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7010 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 7011 | include·remove_dhcp-server | ||
| 7012 | class·remove_dhcp-server·{ | ||
| 7013 | ··package·{·'dhcp-server': | ||
| 7014 | ····ensure·=>·'purged', | ||
| 7015 | ··} | ||
| 7016 | } | ||
| 7017 | Group ·Mail·Server·Software· Group·contains·1·rule | 7017 | Group ·Mail·Server·Software· Group·contains·1·rule |
| Max diff block lines reached; 22975/28344 bytes (81.06%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 167 lines modified | Offset 15171, 167 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | ||
| 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | 0003b430:·3839·2220·7461·6269·6e64·6578·3d22·3022··89"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d35·3338··apse"·id="idm538 | |||
| 0003b4e0:·3922·3e3c·7461·626c·6520·636c·6173·733d··9"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b | 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d35·3338·3922·3e3c·7072··id="idm5389"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b530:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b540:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b550:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b560:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b570:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | |||
| 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b5e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d35·3339·3022·3e3c·7461··id="idm5390"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b730:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b740:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b750:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b760:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b770:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b780:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b790:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b7a0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b7b0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b7c0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b7d0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b7e0:·2d38·3330·3637·2d39·0a20·202d·2043·4a49··-83067-9.··-·CJI | |||
| 0003b7f0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b800:·4953·412d·5354·4947·2d53·4c45·532d·3132··ISA-STIG-SLES-12 | |||
| 0003b810:·2d30·3130·3439·390a·2020·2d20·4e49·5354··-010499.··-·NIST | |||
| 0003b820:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b830:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b840:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b850:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b860:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b870:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b880:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b890:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b8a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b8b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b8c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b8d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b8e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b900:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b910:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b920:·612d·7461·7267·6574·3d22·2369·646d·3533··a-target="#idm53 | |||
| 0003b930:·3931·2220·7461·6269·6e64·6578·3d22·3022··91"·tabindex="0" | |||
| 0003b940:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b950:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b960:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b970:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b980:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b990:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b9a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b9b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b9c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9d0:·6522·2069·643d·2269·646d·3533·3931·223e··e"·id="idm5391"> | |||
| 0003b9e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b9f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b | 0003ba00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ba10:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ba20:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003ba30:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003ba40:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba50:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| Max diff block lines reached; 1460722/1483546 bytes (98.46%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 141 | ··package: | 145 | ··package: |
| Offset 151, 44 lines modified | Offset 156, 39 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 158 | ··-·low_complexity |
| 154 | ··-·low_disruption | 159 | ··-·low_disruption |
| 155 | ··-·medium_severity | 160 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 180 | zypper·install·-y·"aide" | 170 | zypper·install·-y·"aide" |
| 181 | else | 171 | else |
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 183 | fi | 173 | fi |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | include·install_aide | ||
| 180 | class·install_aide·{ | ||
| 181 | ··package·{·'aide': | ||
| 182 | ····ensure·=>·'installed', | ||
| 183 | ··} | ||
| 184 | } | ||
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 185 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 186 | $·sudo·/usr/bin/aide·--init | 187 | $·sudo·/usr/bin/aide·--init |
| 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 188 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 189 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 189 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 190 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 190 | generated·database·can·be·installed·as·follows: | 191 | generated·database·can·be·installed·as·follows: |
| Offset 971, 26 lines modified | Offset 971, 14 lines modified | ||
| 971 | ··-·NIST-800-53-CM-7(b) | 971 | ··-·NIST-800-53-CM-7(b) |
| 972 | ··-·disable_strategy | 972 | ··-·disable_strategy |
| 973 | ··-·low_complexity | 973 | ··-·low_complexity |
| 974 | ··-·low_disruption | 974 | ··-·low_disruption |
| 975 | ··-·medium_severity | 975 | ··-·medium_severity |
| 976 | ··-·no_reboot_needed | 976 | ··-·no_reboot_needed |
| 977 | ··-·package_gdm_removed | 977 | ··-·package_gdm_removed |
| 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 983 | include·remove_gdm | ||
| 984 | class·remove_gdm·{ | ||
| 985 | ··package·{·'gdm': | ||
| 986 | ····ensure·=>·'purged', | ||
| 987 | ··} | ||
| 988 | } | ||
| 989 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 978 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 990 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 979 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 991 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 980 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 992 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 981 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 993 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 982 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 994 | #·Remediation·is·applicable·only·in·certain·platforms | 983 | #·Remediation·is·applicable·only·in·certain·platforms |
| 995 | if·rpm·--quiet·-q·gdm;·then | 984 | if·rpm·--quiet·-q·gdm;·then |
| Offset 1002, 14 lines modified | Offset 990, 26 lines modified | ||
| 1002 | #» ···system! | 990 | #» ···system! |
| 1003 | zypper·remove·-y·"gdm" | 991 | zypper·remove·-y·"gdm" |
| 1004 | else | 992 | else |
| 1005 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 993 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1006 | fi | 994 | fi |
| Max diff block lines reached; 152811/158403 bytes (96.47%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037ef0:·323 | 00037ef0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 168 lines modified | Offset 15149, 168 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | 0003b2d0:·6d35·3338·3922·2074·6162·696e·6465·783d··m5389"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·204 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3533·3839·223e·3c74·6162·6c65·2063·6c61··5389"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3533·3839·223e··e"·id="idm5389"> | |||
| 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3e0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3f0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b400:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b410:·6172·6765·743d·2223·6964·6d35·3339·3022··arget="#idm5390" | |||
| 0003b420:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b430:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b440:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b450:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b460:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b470:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b480:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4c0:·6522·2069·643d·2269·646d·3533·3930·223e··e"·id="idm5390"> | |||
| 0003b4d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b4f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b500:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b510:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b530:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b540:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b550:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b560:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b570:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b580:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3036·372d··:.··-·CCE-83067- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·322d·3031·3034·3939··G-SLES-12-010499 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b580:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b590:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b5a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b5b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b5c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b5d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b600:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b610:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b | 0003b590:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b5a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b5d0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b5e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b5f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b600:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b610:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b620:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b630:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b640:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b650:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b660:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b670:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b680:·4343·452d·3833·3036·372d·390a·2020·2d20··CCE-83067-9.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b6b0:·2d31·322d·3031·3034·3939·0a20·202d·204e··-12-010499.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| Max diff block lines reached; 1261132/1284232 bytes (98.20%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 142 | ··package: |
| Offset 148, 44 lines modified | Offset 153, 39 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | include·install_aide | ||
| 161 | class·install_aide·{ | ||
| 162 | ··package·{·'aide': | ||
| 163 | ····ensure·=>·'installed', | ||
| 164 | ··} | ||
| 165 | } | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 177 | zypper·install·-y·"aide" | 167 | zypper·install·-y·"aide" |
| 178 | else | 168 | else |
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 180 | fi | 170 | fi |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | include·install_aide | ||
| 177 | class·install_aide·{ | ||
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/bin/aide·--init | 184 | $·sudo·/usr/bin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 187 | generated·database·can·be·installed·as·follows: | 188 | generated·database·can·be·installed·as·follows: |
| Offset 861, 26 lines modified | Offset 861, 14 lines modified | ||
| 861 | ··-·NIST-800-53-CM-7(b) | 861 | ··-·NIST-800-53-CM-7(b) |
| 862 | ··-·disable_strategy | 862 | ··-·disable_strategy |
| 863 | ··-·low_complexity | 863 | ··-·low_complexity |
| 864 | ··-·low_disruption | 864 | ··-·low_disruption |
| 865 | ··-·medium_severity | 865 | ··-·medium_severity |
| 866 | ··-·no_reboot_needed | 866 | ··-·no_reboot_needed |
| 867 | ··-·package_gdm_removed | 867 | ··-·package_gdm_removed |
| 868 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 869 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 870 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 871 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 872 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 873 | include·remove_gdm | ||
| 874 | class·remove_gdm·{ | ||
| 875 | ··package·{·'gdm': | ||
| 876 | ····ensure·=>·'purged', | ||
| 877 | ··} | ||
| 878 | } | ||
| 879 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 868 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 880 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 869 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 881 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 870 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 882 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 871 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 883 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 872 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 884 | #·Remediation·is·applicable·only·in·certain·platforms | 873 | #·Remediation·is·applicable·only·in·certain·platforms |
| 885 | if·rpm·--quiet·-q·gdm;·then | 874 | if·rpm·--quiet·-q·gdm;·then |
| Offset 892, 14 lines modified | Offset 880, 26 lines modified | ||
| 892 | #» ···system! | 880 | #» ···system! |
| 893 | zypper·remove·-y·"gdm" | 881 | zypper·remove·-y·"gdm" |
| 894 | else | 882 | else |
| 895 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 883 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 896 | fi | 884 | fi |
| Max diff block lines reached; 137913/143514 bytes (96.10%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f00:·2d30·3 | 00037f00:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 168 lines modified | Offset 15135, 168 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | 0003b1f0:·6964·6d35·3338·3922·2074·6162·696e·6465··idm5389"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·204 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3533·3839·223e·3c74·6162·6c65·2063··dm5389"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b | 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3533·3839··pse"·id="idm5389 | |||
| 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b330:·2d74·6172·6765·743d·2223·6964·6d35·3339··-target="#idm539 | |||
| 0003b340:·3022·2074·6162·696e·6465·783d·2230·2220··0"·tabindex="0"· | |||
| 0003b350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3e0:·7073·6522·2069·643d·2269·646d·3533·3930··pse"·id="idm5390 | |||
| 0003b3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b450:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b460:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b470:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b490:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b4a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3036··gs:.··-·CCE-8306 | |||
| 0003b460:·372d·390a·2020·2d20·434a·4953·2d35·2e31··7-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·322d·3031·3034··TIG-SLES-12-0104 | |||
| 0003b490:·3939·0a20·202d·204e·4953·542d·3830·302d··99.··-·NIST-800- | |||
| 0003b4a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b4e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b500:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b510:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b520:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b530:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b | 0003b4b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b4c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b4e0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b4f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b500:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b510:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b520:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b530:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b540:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b550:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b560:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b570:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b580:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b590:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b5a0:·2d20·4343·452d·3833·3036·372d·390a·2020··-·CCE-83067-9.·· | |||
| 0003b5b0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b5c0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b5d0:·4553·2d31·322d·3031·3034·3939·0a20·202d··ES-12-010499.··- | |||
| 0003b5e0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b5f0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| Max diff block lines reached; 1061356/1084456 bytes (97.87%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 185 | generated·database·can·be·installed·as·follows: |
| Offset 858, 26 lines modified | Offset 858, 14 lines modified | ||
| 858 | ··-·NIST-800-53-CM-7(b) | 858 | ··-·NIST-800-53-CM-7(b) |
| 859 | ··-·disable_strategy | 859 | ··-·disable_strategy |
| 860 | ··-·low_complexity | 860 | ··-·low_complexity |
| 861 | ··-·low_disruption | 861 | ··-·low_disruption |
| 862 | ··-·medium_severity | 862 | ··-·medium_severity |
| 863 | ··-·no_reboot_needed | 863 | ··-·no_reboot_needed |
| 864 | ··-·package_gdm_removed | 864 | ··-·package_gdm_removed |
| 865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 870 | include·remove_gdm | ||
| 871 | class·remove_gdm·{ | ||
| 872 | ··package·{·'gdm': | ||
| 873 | ····ensure·=>·'purged', | ||
| 874 | ··} | ||
| 875 | } | ||
| 876 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 865 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 877 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 866 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 878 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 867 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 879 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 868 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 880 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 869 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 881 | #·Remediation·is·applicable·only·in·certain·platforms | 870 | #·Remediation·is·applicable·only·in·certain·platforms |
| 882 | if·rpm·--quiet·-q·gdm;·then | 871 | if·rpm·--quiet·-q·gdm;·then |
| Offset 889, 14 lines modified | Offset 877, 26 lines modified | ||
| 889 | #» ···system! | 877 | #» ···system! |
| 890 | zypper·remove·-y·"gdm" | 878 | zypper·remove·-y·"gdm" |
| 891 | else | 879 | else |
| 892 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 880 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 893 | fi | 881 | fi |
| Max diff block lines reached; 117945/123556 bytes (95.46%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 168 lines modified | Offset 15162, 168 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | 0003b3a0:·3533·3839·2220·7461·6269·6e64·6578·3d22··5389"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·4 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d35·3338·3922·3e3c··"·id="idm5389">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d35··llapse"·id="idm5 | |||
| 0003b450:·3338·3922·3e3c·7461·626c·6520·636c·6173··389"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3330·3637·2d39··.··-·CCE-83067-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3132·2d30·3130·3439·390a··-SLES-12-010499. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b4b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b4c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b4d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b75 | 0003b4e0:·7267·6574·3d22·2369·646d·3533·3930·2220··rget="#idm5390"· | ||
| 0003b76 | 0003b4f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b500:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b780 | 0003b510:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b79 | 0003b520:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b530:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b540:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b7c0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b800:·2269·646d·3533·3930·223e·3c74·6162·6c65··"idm5390"><table | |||
| 0003b810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b | 0003b550:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d35·3339·3022·3e3c··"·id="idm5390">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b | 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b640:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b670:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b680:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b690:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b6a0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b6b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b6c0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b6d0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b6e0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b6f0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| Max diff block lines reached; 1385122/1408084 bytes (98.37%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·12·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 143 | ··package: |
| Offset 149, 44 lines modified | Offset 154, 39 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | include·install_aide | ||
| 162 | class·install_aide·{ | ||
| 163 | ··package·{·'aide': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 178 | zypper·install·-y·"aide" | 168 | zypper·install·-y·"aide" |
| 179 | else | 169 | else |
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 181 | fi | 171 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/bin/aide·--init | 185 | $·sudo·/usr/bin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 187 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 188 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 188 | generated·database·can·be·installed·as·follows: | 189 | generated·database·can·be·installed·as·follows: |
| Offset 969, 26 lines modified | Offset 969, 14 lines modified | ||
| 969 | ··-·NIST-800-53-CM-7(b) | 969 | ··-·NIST-800-53-CM-7(b) |
| 970 | ··-·disable_strategy | 970 | ··-·disable_strategy |
| 971 | ··-·low_complexity | 971 | ··-·low_complexity |
| 972 | ··-·low_disruption | 972 | ··-·low_disruption |
| 973 | ··-·medium_severity | 973 | ··-·medium_severity |
| 974 | ··-·no_reboot_needed | 974 | ··-·no_reboot_needed |
| 975 | ··-·package_gdm_removed | 975 | ··-·package_gdm_removed |
| 976 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 977 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 978 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 979 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 980 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 981 | include·remove_gdm | ||
| 982 | class·remove_gdm·{ | ||
| 983 | ··package·{·'gdm': | ||
| 984 | ····ensure·=>·'purged', | ||
| 985 | ··} | ||
| 986 | } | ||
| 987 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 976 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 988 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 977 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 989 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 978 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 990 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 979 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 991 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 980 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 992 | #·Remediation·is·applicable·only·in·certain·platforms | 981 | #·Remediation·is·applicable·only·in·certain·platforms |
| 993 | if·rpm·--quiet·-q·gdm;·then | 982 | if·rpm·--quiet·-q·gdm;·then |
| Offset 1000, 14 lines modified | Offset 988, 26 lines modified | ||
| 1000 | #» ···system! | 988 | #» ···system! |
| 1001 | zypper·remove·-y·"gdm" | 989 | zypper·remove·-y·"gdm" |
| 1002 | else | 990 | else |
| 1003 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 991 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1004 | fi | 992 | fi |
| Max diff block lines reached; 143627/149235 bytes (96.24%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16981, 167 lines modified | Offset 16981, 167 lines modified | ||
| 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | 00042540:·7461·7267·6574·3d22·2369·646d·3533·3839··target="#idm5389 | ||
| 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 00042550:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 00042560:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 00042570:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 00042580:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 00042590:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 000425a0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 000425b0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000425c0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000425d0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000425e0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000425 | 000425b0:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | ||
| 000425c0:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 000425d0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 000425e0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 000425f0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042600:·3d22·6964·6d35·3338·3922·3e3c·7072·653e··="idm5389"><pre> | |||
| 00042610:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 00042620:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 00042630:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 00042640:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | |||
| 000426 | 00042650:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 00042610:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042620:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042630:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042640:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042650:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042660:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 000426 | 00042660:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 00042670:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | |||
| 00042680:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | |||
| 00042690:·3d22·2369·646d·3533·3930·2220·7461·6269··="#idm5390"·tabi | |||
| 000426a0:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | |||
| 000426b0:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | |||
| 000426c0:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | |||
| 000426d0:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | |||
| 000426e0:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | |||
| 000426f0:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | |||
| 00042700:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 00042710:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 00042720:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 00042730:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 00042740:·3d22·6964·6d35·3339·3022·3e3c·7461·626c··="idm5390"><tabl | |||
| 00042750:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00042760:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00042770:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00042780:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00042790:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 000427a0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 000427b0:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 000427c0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 000427d0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000427e0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 000427f0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00042800:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00042810:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00042820:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00042830:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00042840:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 00042850:·6520·6169·6465·2069·7320·696e·7374·616c··e·aide·is·instal | |||
| 00042860:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00042870:·2020·206e·616d·653a·2061·6964·650a·2020·····name:·aide.·· | |||
| 00042880:·2020·7374·6174·653a·2070·7265·7365·6e74····state:·present | |||
| 00042890:·0a20·2077·6865·6e3a·2061·6e73·6962·6c65··.··when:·ansible | |||
| 000428a0:·5f76·6972·7475·616c·697a·6174·696f·6e5f··_virtualization_ | |||
| 000428b0:·7479·7065·206e·6f74·2069·6e20·5b22·646f··type·not·in·["do | |||
| 000428c0:·636b·6572·222c·2022·6c78·6322·2c20·226f··cker",·"lxc",·"o | |||
| 000428d0:·7065·6e76·7a22·2c20·2270·6f64·6d61·6e22··penvz",·"podman" | |||
| 000428e0:·2c20·2263·6f6e·7461·696e·6572·225d·0a20··,·"container"].· | |||
| 000428f0:·2074·6167·733a·0a20·202d·2043·4345·2d38···tags:.··-·CCE-8 | |||
| 00042900:·3330·3637·2d39·0a20·202d·2043·4a49·532d··3067-9.··-·CJIS- | |||
| 00042910:·352e·3130·2e31·2e33·0a20·202d·2044·4953··5.10.1.3.··-·DIS | |||
| 00042920:·412d·5354·4947·2d53·4c45·532d·3132·2d30··A-STIG-SLES-12-0 | |||
| 00042930:·3130·3439·390a·2020·2d20·4e49·5354·2d38··10499.··-·NIST-8 | |||
| 00042940:·3030·2d35·332d·434d·2d36·2861·290a·2020··00-53-CM-6(a).·· | |||
| 00042950:·2d20·5043·492d·4453·532d·5265·712d·3131··-·PCI-DSS-Req-11 | |||
| 00042960:·2e35·0a20·202d·2050·4349·2d44·5353·7634··.5.··-·PCI-DSSv4 | |||
| 00042970:·2d31·312e·352e·320a·2020·2d20·656e·6162··-11.5.2.··-·enab | |||
| 00042980:·6c65·5f73·7472·6174·6567·790a·2020·2d20··le_strategy.··-· | |||
| 00042990:·6c6f·775f·636f·6d70·6c65·7869·7479·0a20··low_complexity.· | |||
| 000429a0:·202d·206c·6f77·5f64·6973·7275·7074·696f···-·low_disruptio | |||
| 000429b0:·6e0a·2020·2d20·6d65·6469·756d·5f73·6576··n.··-·medium_sev | |||
| 000429c0:·6572·6974·790a·2020·2d20·6e6f·5f72·6562··erity.··-·no_reb | |||
| 000429d0:·6f6f·745f·6e65·6564·6564·0a20·202d·2070··oot_needed.··-·p | |||
| 000429e0:·6163·6b61·6765·5f61·6964·655f·696e·7374··ackage_aide_inst | |||
| 000429f0:·616c·6c65·640a·3c2f·636f·6465·3e3c·2f70··alled.</code></p | |||
| 00042a00:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 00042a10:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042a20:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042a30:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042a40:·7461·7267·6574·3d22·2369·646d·3533·3931··target="#idm5391 | |||
| 00042a50:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042a60:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042a70:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042a80:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042a90:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042aa0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042ab0:·696f·6e20·5368·656c·6c20·7363·7269·7074··ion·Shell·script | |||
| 00042ac0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00042ad0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00042ae0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00042af0:·2069·643d·2269·646d·3533·3931·223e·3c74···id="idm5391"><t | |||
| 00042b00:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00042b10:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00042b20:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00042b30:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 00042b40:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00042 | 00042b50:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | ||
| 00042 | 00042b60:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | ||
| 00042b70:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 00042b80:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| Max diff block lines reached; 590110/612934 bytes (96.28%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 529, 14 lines modified | Offset 529, 19 lines modified | ||
| 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 529 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 530 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 532 | ·············_\x8c_\x8i_\x8s············1.4.1 | 532 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 533 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 534 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 535 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 537 | [[packages]] | ||
| 538 | name·=·"aide" | ||
| 539 | version·=·"*" | ||
| 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 541 | -·name:·Ensure·aide·is·installed | 545 | -·name:·Ensure·aide·is·installed |
| 542 | ··package: | 546 | ··package: |
| Offset 552, 44 lines modified | Offset 557, 39 lines modified | ||
| 552 | ··-·PCI-DSSv4-11.5.2 | 557 | ··-·PCI-DSSv4-11.5.2 |
| 553 | ··-·enable_strategy | 558 | ··-·enable_strategy |
| 554 | ··-·low_complexity | 559 | ··-·low_complexity |
| 555 | ··-·low_disruption | 560 | ··-·low_disruption |
| 556 | ··-·medium_severity | 561 | ··-·medium_severity |
| 557 | ··-·no_reboot_needed | 562 | ··-·no_reboot_needed |
| 558 | ··-·package_aide_installed | 563 | ··-·package_aide_installed |
| 559 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 560 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 561 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 562 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 563 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 564 | include·install_aide | ||
| 565 | class·install_aide·{ | ||
| 566 | ··package·{·'aide': | ||
| 567 | ····ensure·=>·'installed', | ||
| 568 | ··} | ||
| 569 | } | ||
| 570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 571 | [[packages]] | ||
| 572 | name·=·"aide" | ||
| 573 | version·=·"*" | ||
| 574 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 575 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 576 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 577 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 578 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 579 | #·Remediation·is·applicable·only·in·certain·platforms | 569 | #·Remediation·is·applicable·only·in·certain·platforms |
| 580 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 581 | zypper·install·-y·"aide" | 571 | zypper·install·-y·"aide" |
| 582 | else | 572 | else |
| 583 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 573 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 584 | fi | 574 | fi |
| 575 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 576 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 577 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 578 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 579 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 580 | include·install_aide | ||
| 581 | class·install_aide·{ | ||
| 582 | ··package·{·'aide': | ||
| 583 | ····ensure·=>·'installed', | ||
| 584 | ··} | ||
| 585 | } | ||
| 585 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 586 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 586 | Run·the·following·command·to·generate·a·new·database: | 587 | Run·the·following·command·to·generate·a·new·database: |
| 587 | $·sudo·/usr/bin/aide·--init | 588 | $·sudo·/usr/bin/aide·--init |
| 588 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 589 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 589 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 590 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 590 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 591 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 591 | generated·database·can·be·installed·as·follows: | 592 | generated·database·can·be·installed·as·follows: |
| Offset 7473, 14 lines modified | Offset 7473, 18 lines modified | ||
| 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7473 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7474 | Identifiers:·CCE-91646-0 | 7474 | Identifiers:·CCE-91646-0 |
| 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7475 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7476 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7477 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7478 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7479 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7481 | [customizations.services] | ||
| 7482 | enabled·=·["pcscd"] | ||
| 7480 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7483 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7481 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7484 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7482 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7485 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7483 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7486 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7484 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7487 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7485 | -·name:·Enable·service·pcscd | 7488 | -·name:·Enable·service·pcscd |
| 7486 | ··block: | 7489 | ··block: |
| Offset 7516, 31 lines modified | Offset 7520, 14 lines modified | ||
| 7516 | ··-·PCI-DSS-Req-8.3 | 7520 | ··-·PCI-DSS-Req-8.3 |
| 7517 | ··-·enable_strategy | 7521 | ··-·enable_strategy |
| 7518 | ··-·low_complexity | 7522 | ··-·low_complexity |
| 7519 | ··-·low_disruption | 7523 | ··-·low_disruption |
| 7520 | ··-·medium_severity | 7524 | ··-·medium_severity |
| 7521 | ··-·no_reboot_needed | 7525 | ··-·no_reboot_needed |
| 7522 | ··-·service_pcscd_enabled | 7526 | ··-·service_pcscd_enabled |
| 7523 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7524 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7525 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7526 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7527 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7528 | include·enable_pcscd | ||
| 7529 | class·enable_pcscd·{ | ||
| Max diff block lines reached; 62662/68385 bytes (91.63%) of diff not shown. | |||
| Offset 14298, 15 lines modified | Offset 14298, 15 lines modified | ||
| 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037d90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037da0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037db0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037dc0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037dd0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037de0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037df0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037e00:·323 | 00037e00:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037e10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037e20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037e30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037e40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037e50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037e60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037e70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 16926, 168 lines modified | Offset 16926, 168 lines modified | ||
| 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 000421d0:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 000421e0:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 000421f0:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 00042200:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 00042210:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 00042220:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 00042230:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 00042240:·6d65·6469·6174·696f·6e20·4 | 00042240:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 00042250:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 00042260:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 00042270:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 00042280:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 00042290:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 000422a0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 000422b0:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 000422c0:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 000422d0:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 000422e0:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 000422f0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 00042300:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 00042310:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 00042320:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 00042330:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 00042340:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 00042350:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 00042 | 00042250:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 00042260:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 00042270:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 00042280:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 00042290:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 000422a0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 000422b0:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 000422c0:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 000422d0:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 000422e0:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 000422f0:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 00042300:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 00042310:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 00042320:·7461·7267·6574·3d22·2369·646d·3533·3930··target="#idm5390 | |||
| 00042330:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 00042340:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 00042350:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 00042360:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 00042370:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 00042380:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 00042390:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 000423a0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 000423b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 000423c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 000423d0:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 000423e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 000423f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 00042400:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 00042410:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 00042420:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 00042430:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 00042 | 00042440:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | ||
| 00042450:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 00042380:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 00042390:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 000423a0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 000423b0:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 000423c0:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 000423d0:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 000423e0:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 000423f0:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 00042400:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 00042410:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 00042420:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 00042430:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 00042440:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 00042450:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 00042460:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 00042470:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 00042480:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 00042490:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 000424a0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 000424b0:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 000424c0:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 000424d0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 000424e0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 000424f0:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 00042500:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 00042510:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 00042520:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 00042530:·6765·5f61·6964·655f·696e·7374·616c·6c65··ge_aide_installe | |||
| 00042540:·640a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··d.</code></pre>< | |||
| 00042550:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 00042560:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 00042570:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 00042580:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 00042590:·6574·3d22·2369·646d·3533·3930·2220·7461··et="#idm5390"·ta | |||
| 000425a0:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 000425b0:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000425c0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000425d0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000425e0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000425f0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 00042600:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 00042610:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00042620:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00042630:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00042640:·643d·2269·646d·3533·3930·223e·3c74·6162··d="idm5390"><tab | |||
| 00042650:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 00042660:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 00042670:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 00042680:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 00042690:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 00042 | 00042460:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | ||
| 000426b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 000426c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| Max diff block lines reached; 229724/252686 bytes (90.91%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v3.2.1·Control·Baseline·for·SUSE·Linux·enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 50 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 51 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 52 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 519, 14 lines modified | Offset 519, 19 lines modified | ||
| 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 519 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 520 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 521 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 522 | ·············_\x8c_\x8i_\x8s············1.4.1 | 522 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 523 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 524 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 525 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 527 | [[packages]] | ||
| 528 | name·=·"aide" | ||
| 529 | version·=·"*" | ||
| 526 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 527 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 528 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 529 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 530 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 531 | -·name:·Ensure·aide·is·installed | 535 | -·name:·Ensure·aide·is·installed |
| 532 | ··package: | 536 | ··package: |
| Offset 542, 44 lines modified | Offset 547, 39 lines modified | ||
| 542 | ··-·PCI-DSSv4-11.5.2 | 547 | ··-·PCI-DSSv4-11.5.2 |
| 543 | ··-·enable_strategy | 548 | ··-·enable_strategy |
| 544 | ··-·low_complexity | 549 | ··-·low_complexity |
| 545 | ··-·low_disruption | 550 | ··-·low_disruption |
| 546 | ··-·medium_severity | 551 | ··-·medium_severity |
| 547 | ··-·no_reboot_needed | 552 | ··-·no_reboot_needed |
| 548 | ··-·package_aide_installed | 553 | ··-·package_aide_installed |
| 549 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 550 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 551 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 552 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 553 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 554 | include·install_aide | ||
| 555 | class·install_aide·{ | ||
| 556 | ··package·{·'aide': | ||
| 557 | ····ensure·=>·'installed', | ||
| 558 | ··} | ||
| 559 | } | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"aide" | ||
| 563 | version·=·"*" | ||
| 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 554 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 555 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 556 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 557 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 558 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 569 | #·Remediation·is·applicable·only·in·certain·platforms | 559 | #·Remediation·is·applicable·only·in·certain·platforms |
| 570 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 560 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 571 | zypper·install·-y·"aide" | 561 | zypper·install·-y·"aide" |
| 572 | else | 562 | else |
| 573 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 563 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 574 | fi | 564 | fi |
| 565 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 566 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 567 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 568 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 569 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 570 | include·install_aide | ||
| 571 | class·install_aide·{ | ||
| 572 | ··package·{·'aide': | ||
| 573 | ····ensure·=>·'installed', | ||
| 574 | ··} | ||
| 575 | } | ||
| 575 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 576 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 576 | Run·the·following·command·to·generate·a·new·database: | 577 | Run·the·following·command·to·generate·a·new·database: |
| 577 | $·sudo·/usr/bin/aide·--init | 578 | $·sudo·/usr/bin/aide·--init |
| 578 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 579 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 579 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 580 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 580 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 581 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 581 | generated·database·can·be·installed·as·follows: | 582 | generated·database·can·be·installed·as·follows: |
| Offset 7463, 14 lines modified | Offset 7463, 18 lines modified | ||
| 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled | 7463 | Rule·ID:·····xccdf_org.ssgproject.content_rule_service_pcscd_enabled |
| 7464 | Identifiers:·CCE-91646-0 | 7464 | Identifiers:·CCE-91646-0 |
| 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 | 7465 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-001954 |
| 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 | 7466 | ·············_\x8i_\x8s_\x8m····1382,·1384,·1386 |
| 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) | 7467 | References:··_\x8n_\x8i_\x8s_\x8t···IA-2(1),·IA-2(2),·IA-2(3),·IA-2(4),·IA-2(6),·IA-2(7),·IA-2(11),·CM-6(a) |
| 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 | 7468 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·Req-8.3 |
| 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 | 7469 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000375-GPOS-00160 |
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7471 | [customizations.services] | ||
| 7472 | enabled·=·["pcscd"] | ||
| 7470 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 7473 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 7471 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 7474 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 7472 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 7475 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 7473 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 7476 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 7474 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 7477 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 7475 | -·name:·Enable·service·pcscd | 7478 | -·name:·Enable·service·pcscd |
| 7476 | ··block: | 7479 | ··block: |
| Offset 7506, 31 lines modified | Offset 7510, 14 lines modified | ||
| 7506 | ··-·PCI-DSS-Req-8.3 | 7510 | ··-·PCI-DSS-Req-8.3 |
| 7507 | ··-·enable_strategy | 7511 | ··-·enable_strategy |
| 7508 | ··-·low_complexity | 7512 | ··-·low_complexity |
| 7509 | ··-·low_disruption | 7513 | ··-·low_disruption |
| 7510 | ··-·medium_severity | 7514 | ··-·medium_severity |
| 7511 | ··-·no_reboot_needed | 7515 | ··-·no_reboot_needed |
| 7512 | ··-·service_pcscd_enabled | 7516 | ··-·service_pcscd_enabled |
| 7513 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 7514 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 7515 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 7516 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 7517 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 7518 | include·enable_pcscd | ||
| 7519 | class·enable_pcscd·{ | ||
| Max diff block lines reached; 19944/25669 bytes (77.70%) of diff not shown. | |||
| Offset 14304, 16 lines modified | Offset 14304, 16 lines modified | ||
| 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | 00037df0:·7369·6f6e·2048·6973·746f·7279·3c2f·6832··sion·History</h2 | ||
| 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | 00037e00:·3e3c·703e·4375·7272·656e·7420·7665·7273··><p>Current·vers | ||
| 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | 00037e10:·696f·6e3a·203c·7374·726f·6e67·3e30·2e31··ion:·<strong>0.1 | ||
| 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | 00037e20:·2e37·343c·2f73·7472·6f6e·673e·3c2f·703e··.74</strong></p> | ||
| 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | 00037e30:·3c75·6c3e·3c6c·693e·3c73·7472·6f6e·673e··<ul><li><strong> | ||
| 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | 00037e40:·6472·6166·743c·2f73·7472·6f6e·673e·0a20··draft</strong>.· | ||
| 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e50:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e60:·2020·2028·6173·206f·6620·3230·323 | 00037e60:·2020·2028·6173·206f·6620·3230·3235·2d30·····(as·of·2025-0 | ||
| 00037e70:·3 | 00037e70:·312d·3233·290a·2020·2020·2020·2020·2020··1-23).·········· | ||
| 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | 00037e80:·2020·2020·2020·3c2f·6c69·3e3c·2f75·6c3e········</li></ul> | ||
| 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | 00037e90:·3c2f·6469·763e·3c68·323e·5461·626c·6520··</div><h2>Table· | ||
| 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | 00037ea0:·6f66·2043·6f6e·7465·6e74·733c·2f68·323e··of·Contents</h2> | ||
| 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | 00037eb0:·3c6f·6c3e·3c6c·693e·3c61·2068·7265·663d··<ol><li><a·href= | ||
| 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | 00037ec0:·2223·7863·6364·665f·6f72·672e·7373·6770··"#xccdf_org.ssgp | ||
| 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | 00037ed0:·726f·6a65·6374·2e63·6f6e·7465·6e74·5f67··roject.content_g | ||
| 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys | 00037ee0:·726f·7570·5f73·7973·7465·6d22·3e53·7973··roup_system">Sys |
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·12 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 43 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 44 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········1.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* | 51 | *\x8**\x8**\x8**\x8**\x8*·C\x8Ch\x8he\x8ec\x8ck\x8kl\x8li\x8is\x8st\x8t·*\x8**\x8**\x8**\x8**\x8* |
| 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group | 52 | Group ·Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12· Group |
| 53 | contains·4·groups·and·3·rules | 53 | contains·4·groups·and·3·rules |
| 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules | 54 | Group ·System·Settings· Group·contains·3·groups·and·3·rules |
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 168 lines modified | Offset 15107, 168 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | 0003b030:·646d·3533·3839·2220·7461·6269·6e64·6578··dm5389"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20·4 | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d35·3338·3922·3e3c·7461·626c·6520·636c··m5389"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b110:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d35·3338·3922··se"·id="idm5389" | |||
| 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b140:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b150:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b160:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b170:·7461·7267·6574·3d22·2369·646d·3533·3930··target="#idm5390 | |||
| 0003b180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b1f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b200:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b210:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b220:·7365·2220·6964·3d22·6964·6d35·3339·3022··se"·id="idm5390" | |||
| 0003b230:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b240:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b250:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b260:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b270:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b280:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b290:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b2e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3330·3637··s:.··-·CCE-83067 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3132·2d30·3130·3439··IG-SLES-12-01049 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b2f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b300:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b310:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b320:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b330:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b340:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b350:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b360:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b370:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b | 0003b2f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b300:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b310:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b320:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b330:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b340:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b350:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b360:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b370:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b380:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b390:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b3a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b3b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b3c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b3d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b3e0:·2043·4345·2d38·3330·3637·2d39·0a20·202d···CCE-83067-9.··- | |||
| 0003b3f0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b400:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b410:·532d·3132·2d30·3130·3439·390a·2020·2d20··S-12-010499.··-· | |||
| 0003b420:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b430:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b440:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| Max diff block lines reached; 383818/406780 bytes (94.36%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·12 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:12 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:12 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 114, 14 lines modified | Offset 114, 19 lines modified | ||
| 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 114 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 115 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 | 116 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-12-010499 |
| 117 | ·············_\x8c_\x8i_\x8s············1.4.1 | 117 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 118 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 119 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule | 120 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255916r880937_rule |
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 122 | [[packages]] | ||
| 123 | name·=·"aide" | ||
| 124 | version·=·"*" | ||
| 121 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 125 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 122 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 126 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 123 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 127 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 124 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 128 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 125 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 129 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 126 | -·name:·Ensure·aide·is·installed | 130 | -·name:·Ensure·aide·is·installed |
| 127 | ··package: | 131 | ··package: |
| Offset 137, 44 lines modified | Offset 142, 39 lines modified | ||
| 137 | ··-·PCI-DSSv4-11.5.2 | 142 | ··-·PCI-DSSv4-11.5.2 |
| 138 | ··-·enable_strategy | 143 | ··-·enable_strategy |
| 139 | ··-·low_complexity | 144 | ··-·low_complexity |
| 140 | ··-·low_disruption | 145 | ··-·low_disruption |
| 141 | ··-·medium_severity | 146 | ··-·medium_severity |
| 142 | ··-·no_reboot_needed | 147 | ··-·no_reboot_needed |
| 143 | ··-·package_aide_installed | 148 | ··-·package_aide_installed |
| 144 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 145 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 146 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 147 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 148 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 149 | include·install_aide | ||
| 150 | class·install_aide·{ | ||
| 151 | ··package·{·'aide': | ||
| 152 | ····ensure·=>·'installed', | ||
| 153 | ··} | ||
| 154 | } | ||
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | [[packages]] | ||
| 157 | name·=·"aide" | ||
| 158 | version·=·"*" | ||
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 149 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 150 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 151 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 152 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 153 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 164 | #·Remediation·is·applicable·only·in·certain·platforms | 154 | #·Remediation·is·applicable·only·in·certain·platforms |
| 165 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 155 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 166 | zypper·install·-y·"aide" | 156 | zypper·install·-y·"aide" |
| 167 | else | 157 | else |
| 168 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 158 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 169 | fi | 159 | fi |
| 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 165 | include·install_aide | ||
| 166 | class·install_aide·{ | ||
| 167 | ··package·{·'aide': | ||
| 168 | ····ensure·=>·'installed', | ||
| 169 | ··} | ||
| 170 | } | ||
| 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 171 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 171 | Run·the·following·command·to·generate·a·new·database: | 172 | Run·the·following·command·to·generate·a·new·database: |
| 172 | $·sudo·/usr/bin/aide·--init | 173 | $·sudo·/usr/bin/aide·--init |
| 173 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 174 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 174 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 175 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 175 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 176 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 176 | generated·database·can·be·installed·as·follows: | 177 | generated·database·can·be·installed·as·follows: |
| Offset 9475, 14 lines modified | Offset 9475, 19 lines modified | ||
| 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 9475 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 9476 | Identifiers:·CCE-83009-1 | 9476 | Identifiers:·CCE-83009-1 |
| 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 9477 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) | 9478 | ·············_\x8n_\x8i_\x8s_\x8t····AC-11(a),·AC-11(b),·AC-11(1) |
| 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 9479 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 | 9480 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-12-010070 |
| 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule | 9481 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-217108r603262_rule |
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9483 | [[packages]] | ||
| 9484 | name·=·"kbd" | ||
| 9485 | version·=·"*" | ||
| 9482 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 9486 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 9483 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 9487 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 9484 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 9488 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 9485 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 9489 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 9486 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 9490 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 9487 | -·name:·Ensure·kbd·is·installed | 9491 | -·name:·Ensure·kbd·is·installed |
| 9488 | ··package: | 9492 | ··package: |
| Offset 9497, 44 lines modified | Offset 9502, 39 lines modified | ||
| 9497 | ··-·NIST-800-53-AC-11(b) | 9502 | ··-·NIST-800-53-AC-11(b) |
| 9498 | ··-·enable_strategy | 9503 | ··-·enable_strategy |
| 9499 | ··-·low_complexity | 9504 | ··-·low_complexity |
| 9500 | ··-·low_disruption | 9505 | ··-·low_disruption |
| 9501 | ··-·medium_severity | 9506 | ··-·medium_severity |
| 9502 | ··-·no_reboot_needed | 9507 | ··-·no_reboot_needed |
| 9503 | ··-·vlock_installed | 9508 | ··-·vlock_installed |
| 9504 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 9505 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 9506 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 9507 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 9508 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 9509 | include·install_kbd | ||
| Max diff block lines reached; 43146/48763 bytes (88.48%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038060:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038070:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038080:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038090:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380a0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380b0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380c0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380d0:·7320·6f66·2032·3032·3 | 000380d0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380e0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380f0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038100:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038110:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038120:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038130:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038140:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15134, 167 lines modified | Offset 15134, 167 lines modified | ||
| 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | 0003b1d0:·7461·7267·6574·3d22·2369·646d·3633·3332··target="#idm6332 | ||
| 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | 0003b1e0:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | ||
| 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | 0003b1f0:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | ||
| 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | 0003b200:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | ||
| 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | 0003b210:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | ||
| 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | 0003b220:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | ||
| 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | 0003b230:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | ||
| 0003b240:·696f·6e20·4f53·4275·696c·6420·426c·7565··ion·OSBuild·Blue | |||
| 0003b250:·7072·696e·7420·736e·6970·7065·7420·e287··print·snippet·.. | |||
| 0003b260:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b270:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b280:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | |||
| 0003b290:·3d22·6964·6d36·3333·3222·3e3c·7072·653e··="idm6332"><pre> | |||
| 0003b2a0:·3c63·6f64·653e·0a5b·5b70·6163·6b61·6765··<code>.[[package | |||
| 0003b2b0:·735d·5d0a·6e61·6d65·203d·2022·6169·6465··s]].name·=·"aide | |||
| 0003b2c0:·220a·7665·7273·696f·6e20·3d20·222a·220a··".version·=·"*". | |||
| 0003b240:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b250:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b260:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b270:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b280:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b290:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b2a0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b2b0:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b2c0:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b2d0:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b2e0:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b2f0:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b300:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b310:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b320:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b330:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b340:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | |||
| 0003b350:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | |||
| 0003b360:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b370:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b380:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b390:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b3a0:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b3b0:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b3c0:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b3d0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b3e0:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b3f0:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b400:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b410:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b420:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b430:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b440:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b450:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b460:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b470:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b480:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b490:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b4a0:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| 0003b4b0:·2d44·5353·7634·2d31·312e·352e·320a·2020··-DSSv4-11.5.2.·· | |||
| 0003b4c0:·2d20·656e·6162·6c65·5f73·7472·6174·6567··-·enable_strateg | |||
| 0003b4d0:·790a·2020·2d20·6c6f·775f·636f·6d70·6c65··y.··-·low_comple | |||
| 0003b4e0:·7869·7479·0a20·202d·206c·6f77·5f64·6973··xity.··-·low_dis | |||
| 0003b4f0:·7275·7074·696f·6e0a·2020·2d20·6d65·6469··ruption.··-·medi | |||
| 0003b500:·756d·5f73·6576·6572·6974·790a·2020·2d20··um_severity.··-· | |||
| 0003b510:·6e6f·5f72·6562·6f6f·745f·6e65·6564·6564··no_reboot_needed | |||
| 0003b520:·0a20·202d·2070·6163·6b61·6765·5f61·6964··.··-·package_aid | |||
| 0003b530:·655f·696e·7374·616c·6c65·640a·3c2f·636f··e_installed.</co | |||
| 0003b | 0003b2d0:·3c2f·636f·6465·3e3c·2f70·7265·3e3c·2f64··</code></pre></d | ||
| 0003b | 0003b2e0:·6976·3e3c·6120·636c·6173·733d·2262·746e··iv><a·class="btn | ||
| 0003b | 0003b2f0:·2062·746e·2d73·7563·6365·7373·2220·6461···btn-success"·da | ||
| 0003b | 0003b300:·7461·2d74·6f67·676c·653d·2263·6f6c·6c61··ta-toggle="colla | ||
| 0003b | 0003b310:·7073·6522·2064·6174·612d·7461·7267·6574··pse"·data-target | ||
| 0003b | 0003b320:·3d22·2369·646d·3633·3333·2220·7461·6269··="#idm6333"·tabi | ||
| 0003b | 0003b330:·6e64·6578·3d22·3022·2072·6f6c·653d·2262··ndex="0"·role="b | ||
| 0003b | 0003b340:·7574·746f·6e22·2061·7269·612d·6578·7061··utton"·aria-expa | ||
| 0003b | 0003b350:·6e64·6564·3d22·6661·6c73·6522·2074·6974··nded="false"·tit | ||
| 0003b5d | 0003b360:·6c65·3d22·4163·7469·7661·7465·2074·6f20··le="Activate·to· | ||
| 0003b | 0003b370:·7265·7665·616c·2220·6872·6566·3d22·2321··reveal"·href="#! | ||
| 0003b5f0:·6d65·6469·6174·696f·6e20·5075·7070·6574··mediation·Puppet | |||
| 0003b600:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b | 0003b380:·223e·5265·6d65·6469·6174·696f·6e20·416e··">Remediation·An | ||
| 0003b390:·7369·626c·6520·736e·6970·7065·7420·e287··sible·snippet·.. | |||
| 0003b3a0:·b23c·2f61·3e3c·6272·3e3c·6469·7620·636c··.</a><br><div·cl | |||
| 0003b3b0:·6173·733d·2270·616e·656c·2d63·6f6c·6c61··ass="panel-colla | |||
| 0003b | 0003b3c0:·7073·6520·636f·6c6c·6170·7365·2220·6964··pse·collapse"·id | ||
| 0003b630:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b640:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b650:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b660:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b670:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b680:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b | 0003b3d0:·3d22·6964·6d36·3333·3322·3e3c·7461·626c··="idm6333"><tabl | ||
| 0003b3e0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0003b3f0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0003b400:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0003b410:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0003b420:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0003b430:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b440:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0003b450:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 0003b | 0003b460:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | ||
| 0003b6b0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b | 0003b470:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | ||
| 0003b480:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0003b | 0003b490:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | ||
| 0003b6e0:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b6f0:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b700:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b710:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b720:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b730:·6c65·3e3c·7072·653e·3c63·6f64·653e·696e··le><pre><code>in | |||
| 0003b740:·636c·7564·6520·696e·7374·616c·6c5f·6169··clude·install_ai | |||
| 0003b750:·6465·0a0a·636c·6173·7320·696e·7374·616c··de..class·instal | |||
| 0003b760:·6c5f·6169·6465·207b·0a20·2070·6163·6b61··l_aide·{.··packa | |||
| Max diff block lines reached; 654474/677298 bytes (96.63%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(enhanced) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_enhanced |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 63 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 185 | generated·database·can·be·installed·as·follows: |
| Offset 553, 14 lines modified | Offset 553, 19 lines modified | ||
| 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 553 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 554 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 555 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 556 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 557 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 558 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 559 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | [[packages]] | ||
| 562 | name·=·"sudo" | ||
| 563 | version·=·"*" | ||
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 564 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 565 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 566 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 567 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 568 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 565 | -·name:·Ensure·sudo·is·installed | 569 | -·name:·Ensure·sudo·is·installed |
| 566 | ··package: | 570 | ··package: |
| Offset 573, 44 lines modified | Offset 578, 39 lines modified | ||
| 573 | ··-·PCI-DSSv4-2.2.6 | 578 | ··-·PCI-DSSv4-2.2.6 |
| 574 | ··-·enable_strategy | 579 | ··-·enable_strategy |
| 575 | ··-·low_complexity | 580 | ··-·low_complexity |
| 576 | ··-·low_disruption | 581 | ··-·low_disruption |
| 577 | ··-·medium_severity | 582 | ··-·medium_severity |
| 578 | ··-·no_reboot_needed | 583 | ··-·no_reboot_needed |
| 579 | ··-·package_sudo_installed | 584 | ··-·package_sudo_installed |
| 580 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 581 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 582 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 583 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 584 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 585 | include·install_sudo | ||
| Max diff block lines reached; 68725/74238 bytes (92.57%) of diff not shown. | |||
| Offset 14342, 15 lines modified | Offset 14342, 15 lines modified | ||
| 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038050:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038060:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038070:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00038080:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00038090:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380a0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380b0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380c0:·7320·6f66·2032·3032·3 | 000380c0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380d0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 000380e0:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 000380f0:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038100:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038110:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038120:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038130:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15139, 168 lines modified | Offset 15139, 168 lines modified | ||
| 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | 0003b220:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | 0003b230:·3333·3222·2074·6162·696e·6465·783d·2230··332"·tabindex="0 | ||
| 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 0003b240:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 0003b250:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 0003b260:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 0003b270:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 0003b280:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 0003b290:·6961·7469·6f6e·204 | 0003b290:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 0003b2a0:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0003b2 | 0003b2a0:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | ||
| 0003b2b0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b2c0:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b2d0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b2e0:·2069·643d·2269·646d·3633·3332·223e·3c70···id="idm6332"><p | |||
| 0003b2f0:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 0003b300:·6167·6573·5d5d·0a6e·616d·6520·3d20·2261··ages]].name·=·"a | |||
| 0003b310:·6964·6522·0a76·6572·7369·6f6e·203d·2022··ide".version·=·" | |||
| 0003b320:·2a22·0a3c·2f63·6f64·653e·3c2f·7072·653e··*".</code></pre> | |||
| 0003b330:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 0003b340:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 0003b350:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 0003b360:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 0003b370:·6765·743d·2223·6964·6d36·3333·3322·2074··get="#idm6333"·t | |||
| 0003b380:·6162·696e·6465·783d·2230·2220·726f·6c65··abindex="0"·role | |||
| 0003b390:·3d22·6275·7474·6f6e·2220·6172·6961·2d65··="button"·aria-e | |||
| 0003b3a0:·7870·616e·6465·643d·2266·616c·7365·2220··xpanded="false"· | |||
| 0003b3b0:·7469·746c·653d·2241·6374·6976·6174·6520··title="Activate· | |||
| 0003b3c0:·746f·2072·6576·6561·6c22·2068·7265·663d··to·reveal"·href= | |||
| 0003b3d0:·2223·2122·3e52·656d·6564·6961·7469·6f6e··"#!">Remediation | |||
| 0003b3e0:·2041·6e73·6962·6c65·2073·6e69·7070·6574···Ansible·snippet | |||
| 0003b3f0:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 0003b400:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 0003b410:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 0003b420:·2069·643d·2269·646d·3633·3333·223e·3c74···id="idm6333"><t | |||
| 0003b430:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 0003b440:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 0003b450:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 0003b460:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 0003b470:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 0003b480:·7479·3a3c·2f74·683e·3c74·643e·6c6f·773c··ty:</th><td>low< | |||
| 0003b490:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4a0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| 0003b4b0:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b4c0:·723e·3c74·723e·3c74·683e·5265·626f·6f74··r><tr><th>Reboot | |||
| 0003b4d0:·3a3c·2f74·683e·3c74·643e·6661·6c73·653c··:</th><td>false< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e53·7472·6174·6567·793a·3c2f·7468·3e3c··>Strategy:</th>< | |||
| 0003b500:·7464·3e65·6e61·626c·653c·2f74·643e·3c2f··td>enable</td></ | |||
| 0003b510:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0003b520:·3c63·6f64·653e·2d20·6e61·6d65·3a20·456e··<code>-·name:·En | |||
| 0003b530:·7375·7265·2061·6964·6520·6973·2069·6e73··sure·aide·is·ins | |||
| 0003b540:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0003b550:·3a0a·2020·2020·6e61·6d65·3a20·6169·6465··:.····name:·aide | |||
| 0003b560:·0a20·2020·2073·7461·7465·3a20·7072·6573··.····state:·pres | |||
| 0003b570:·656e·740a·2020·7768·656e·3a20·616e·7369··ent.··when:·ansi | |||
| 0003b580:·626c·655f·7669·7274·7561·6c69·7a61·7469··ble_virtualizati | |||
| 0003b590:·6f6e·5f74·7970·6520·6e6f·7420·696e·205b··on_type·not·in·[ | |||
| 0003b5a0:·2264·6f63·6b65·7222·2c20·226c·7863·222c··"docker",·"lxc", | |||
| 0003b5b0:·2022·6f70·656e·767a·222c·2022·706f·646d···"openvz",·"podm | |||
| 0003b5c0:·616e·222c·2022·636f·6e74·6169·6e65·7222··an",·"container" | |||
| 0003b5d0:·5d0a·2020·7461·6773·3a0a·2020·2d20·4343··].··tags:.··-·CC | |||
| 0003b5e0:·452d·3833·3238·392d·390a·2020·2d20·434a··E-83289-9.··-·CJ | |||
| 0003b5f0:·4953·2d35·2e31·302e·312e·330a·2020·2d20··IS-5.10.1.3.··-· | |||
| 0003b600:·4449·5341·2d53·5449·472d·534c·4553·2d31··DISA-STIG-SLES-1 | |||
| 0003b610:·352d·3031·3034·3139·0a20·202d·204e·4953··5-010419.··-·NIS | |||
| 0003b620:·542d·3830·302d·3533·2d43·4d2d·3628·6129··T-800-53-CM-6(a) | |||
| 0003b630:·0a20·202d·2050·4349·2d44·5353·2d52·6571··.··-·PCI-DSS-Req | |||
| 0003b640:·2d31·312e·350a·2020·2d20·5043·492d·4453··-11.5.··-·PCI-DS | |||
| 0003b650:·5376·342d·3131·2e35·2e32·0a20·202d·2065··Sv4-11.5.2.··-·e | |||
| 0003b660:·6e61·626c·655f·7374·7261·7465·6779·0a20··nable_strategy.· | |||
| 0003b670:·202d·206c·6f77·5f63·6f6d·706c·6578·6974···-·low_complexit | |||
| 0003b680:·790a·2020·2d20·6c6f·775f·6469·7372·7570··y.··-·low_disrup | |||
| 0003b690:·7469·6f6e·0a20·202d·206d·6564·6975·6d5f··tion.··-·medium_ | |||
| 0003b6a0:·7365·7665·7269·7479·0a20·202d·206e·6f5f··severity.··-·no_ | |||
| 0003b6b0:·7265·626f·6f74·5f6e·6565·6465·640a·2020··reboot_needed.·· | |||
| 0003b6c0:·2d20·7061·636b·6167·655f·6169·6465·5f69··-·package_aide_i | |||
| 0003b6d0:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 0003b6e0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003b6f0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003b700:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003b | 0003b710:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | ||
| 0003b2d0:·6c61·7073·6522·2069·643d·2269·646d·3633··lapse"·id="idm63 | |||
| 0003b2e0:·3332·223e·3c74·6162·6c65·2063·6c61·7373··32"><table·class | |||
| 0003b2f0:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 0003b | 0003b720:·7461·2d74·6172·6765·743d·2223·6964·6d36··ta-target="#idm6 | ||
| 0003b730:·3333·3422·2074·6162·696e·6465·783d·2230··334"·tabindex="0 | |||
| 0003b740:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003b750:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003b760:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003b770:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003b780:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003b790:·6961·7469·6f6e·2053·6865·6c6c·2073·6372··iation·Shell·scr | |||
| 0003b7a0:·6970·7420·e287·b23c·2f61·3e3c·6272·3e3c··ipt·...</a><br>< | |||
| 0003b7b0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b7c0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b7d0:·7365·2220·6964·3d22·6964·6d36·3333·3422··se"·id="idm6334" | |||
| 0003b7e0:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b7f0:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b | 0003b800:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | ||
| 0003b320:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 0003b330:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 0003b340:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 0003b350:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 0003b | 0003b810:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | ||
| 0003b820:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b830:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b840:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b850:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b860:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b870:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b880:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| Max diff block lines reached; 695688/718650 bytes (96.80%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(high) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_high |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 61 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 62 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 63 | ·········5.·_\x8K_\x8e_\x8r_\x8n_\x8e_\x8l_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| Offset 123, 14 lines modified | Offset 123, 19 lines modified | ||
| 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 123 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 124 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 125 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 126 | ·············_\x8c_\x8i_\x8s············1.4.1 | 126 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 127 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 129 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 131 | [[packages]] | ||
| 132 | name·=·"aide" | ||
| 133 | version·=·"*" | ||
| 130 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 134 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 131 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 135 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 132 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 136 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 133 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 137 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 134 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 138 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 135 | -·name:·Ensure·aide·is·installed | 139 | -·name:·Ensure·aide·is·installed |
| 136 | ··package: | 140 | ··package: |
| Offset 146, 44 lines modified | Offset 151, 39 lines modified | ||
| 146 | ··-·PCI-DSSv4-11.5.2 | 151 | ··-·PCI-DSSv4-11.5.2 |
| 147 | ··-·enable_strategy | 152 | ··-·enable_strategy |
| 148 | ··-·low_complexity | 153 | ··-·low_complexity |
| 149 | ··-·low_disruption | 154 | ··-·low_disruption |
| 150 | ··-·medium_severity | 155 | ··-·medium_severity |
| 151 | ··-·no_reboot_needed | 156 | ··-·no_reboot_needed |
| 152 | ··-·package_aide_installed | 157 | ··-·package_aide_installed |
| 153 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 154 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 155 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 156 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 157 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 158 | include·install_aide | ||
| 159 | class·install_aide·{ | ||
| 160 | ··package·{·'aide': | ||
| 161 | ····ensure·=>·'installed', | ||
| 162 | ··} | ||
| 163 | } | ||
| 164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 165 | [[packages]] | ||
| 166 | name·=·"aide" | ||
| 167 | version·=·"*" | ||
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 173 | #·Remediation·is·applicable·only·in·certain·platforms | 163 | #·Remediation·is·applicable·only·in·certain·platforms |
| 174 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 175 | zypper·install·-y·"aide" | 165 | zypper·install·-y·"aide" |
| 176 | else | 166 | else |
| 177 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 178 | fi | 168 | fi |
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 171 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 172 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 173 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 174 | include·install_aide | ||
| 175 | class·install_aide·{ | ||
| 176 | ··package·{·'aide': | ||
| 177 | ····ensure·=>·'installed', | ||
| 178 | ··} | ||
| 179 | } | ||
| 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 180 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 180 | Run·the·following·command·to·generate·a·new·database: | 181 | Run·the·following·command·to·generate·a·new·database: |
| 181 | $·sudo·/usr/bin/aide·--init | 182 | $·sudo·/usr/bin/aide·--init |
| 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 183 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 184 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 185 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 185 | generated·database·can·be·installed·as·follows: | 186 | generated·database·can·be·installed·as·follows: |
| Offset 1157, 14 lines modified | Offset 1157, 19 lines modified | ||
| 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 1157 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 1158 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 1159 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 1160 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 1161 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 1162 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 1163 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1165 | [[packages]] | ||
| 1166 | name·=·"sudo" | ||
| 1167 | version·=·"*" | ||
| 1164 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1165 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1166 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1167 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1168 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 1172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 1169 | -·name:·Ensure·sudo·is·installed | 1173 | -·name:·Ensure·sudo·is·installed |
| 1170 | ··package: | 1174 | ··package: |
| Offset 1177, 44 lines modified | Offset 1182, 39 lines modified | ||
| 1177 | ··-·PCI-DSSv4-2.2.6 | 1182 | ··-·PCI-DSSv4-2.2.6 |
| 1178 | ··-·enable_strategy | 1183 | ··-·enable_strategy |
| 1179 | ··-·low_complexity | 1184 | ··-·low_complexity |
| 1180 | ··-·low_disruption | 1185 | ··-·low_disruption |
| 1181 | ··-·medium_severity | 1186 | ··-·medium_severity |
| 1182 | ··-·no_reboot_needed | 1187 | ··-·no_reboot_needed |
| 1183 | ··-·package_sudo_installed | 1188 | ··-·package_sudo_installed |
| 1184 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1185 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1186 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1187 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1188 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1189 | include·install_sudo | ||
| Max diff block lines reached; 74921/80442 bytes (93.14%) of diff not shown. | |||
| Offset 14344, 15 lines modified | Offset 14344, 15 lines modified | ||
| 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00038070:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00038080:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00038090:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 000380a0:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 000380b0:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 000380c0:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 000380d0:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 000380e0:·7320·6f66·2032·3032·3 | 000380e0:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 000380f0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00038100:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00038110:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00038120:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00038130:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00038140:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00038150:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 15125, 167 lines modified | Offset 15125, 167 lines modified | ||
| 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | 0003b140:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | ||
| 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | 0003b150:·3222·2074·6162·696e·6465·783d·2230·2220··2"·tabindex="0"· | ||
| 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 0003b160:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 0003b170:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 0003b180:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 0003b190:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 0003b1a0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 0003b1b0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b1c0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b1d0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b1e0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b1f0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b200:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b210:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b220:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b230:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b240:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b250:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b260:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b270:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b280:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b290:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b2a0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b2b0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 0003b | 0003b1b0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003b1c0:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | |||
| 0003b1d0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b1e0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b1f0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b200:·643d·2269·646d·3633·3332·223e·3c70·7265··d="idm6332"><pre | |||
| 0003b210:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | |||
| 0003b220:·6573·5d5d·0a6e·616d·6520·3d20·2261·6964··es]].name·=·"aid | |||
| 0003b230:·6522·0a76·6572·7369·6f6e·203d·2022·2a22··e".version·=·"*" | |||
| 0003b240:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0003b250:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0003b260:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0003b270:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0003b280:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0003b290:·743d·2223·6964·6d36·3333·3322·2074·6162··t="#idm6333"·tab | |||
| 0003b2a0:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0003b2b0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0003b2c0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0003b2d0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0003b2e0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0003b2f0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0003b300:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b310:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b320:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b330:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b340:·643d·2269·646d·3633·3333·223e·3c74·6162··d="idm6333"><tab | |||
| 0003b350:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b360:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b370:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b380:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b390:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b3a0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b3b0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b3c0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b3d0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b3e0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b | 0003b3f0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | ||
| 0003b2e0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b2f0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b300:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b310:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b320:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b330:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b340:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b350:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b360:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b370:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b380:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b390:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b3a0:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b3b0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b3c0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b3d0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b3e0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b3f0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b400:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| 0003b410:·2d52·6571·2d31·312e·350a·2020·2d20·5043··-Req-11.5.··-·PC | |||
| 0003b420:·492d·4453·5376·342d·3131·2e35·2e32·0a20··I-DSSv4-11.5.2.· | |||
| 0003b430:·202d·2065·6e61·626c·655f·7374·7261·7465···-·enable_strate | |||
| 0003b440:·6779·0a20·202d·206c·6f77·5f63·6f6d·706c··gy.··-·low_compl | |||
| 0003b450:·6578·6974·790a·2020·2d20·6c6f·775f·6469··exity.··-·low_di | |||
| 0003b460:·7372·7570·7469·6f6e·0a20·202d·206d·6564··sruption.··-·med | |||
| 0003b470:·6975·6d5f·7365·7665·7269·7479·0a20·202d··ium_severity.··- | |||
| 0003b480:·206e·6f5f·7265·626f·6f74·5f6e·6565·6465···no_reboot_neede | |||
| 0003b490:·640a·2020·2d20·7061·636b·6167·655f·6169··d.··-·package_ai | |||
| 0003b4 | 0003b400:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | ||
| 0003b410:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0003b420:·3e65·6e61·626c·653c·2f74·643e·3c2f·7472··>enable</td></tr | |||
| 0003b430:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b440:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b450:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b460:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b470:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b480:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b490:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b4a0:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b4b0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b4c0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b4d0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b4e0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b4f0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b500:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b510:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b520:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b530:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b540:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b550:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| Max diff block lines reached; 487158/509982 bytes (95.52%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(intermediary) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_intermediary |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 61 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 62 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 63 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the |
| 182 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these | 183 | database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these |
| 183 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their | 184 | files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their |
| 184 | integrity.·The·newly-generated·database·can·be·installed·as·follows: | 185 | integrity.·The·newly-generated·database·can·be·installed·as·follows: |
| Offset 533, 14 lines modified | Offset 533, 19 lines modified | ||
| 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 533 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 534 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 535 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 536 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 537 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 538 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 539 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 541 | [[packages]] | ||
| 542 | name·=·"sudo" | ||
| 543 | version·=·"*" | ||
| 540 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 544 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 541 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 545 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 542 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 546 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 543 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 547 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 544 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 548 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 545 | -·name:·Ensure·sudo·is·installed | 549 | -·name:·Ensure·sudo·is·installed |
| 546 | ··package: | 550 | ··package: |
| Offset 553, 44 lines modified | Offset 558, 39 lines modified | ||
| 553 | ··-·PCI-DSSv4-2.2.6 | 558 | ··-·PCI-DSSv4-2.2.6 |
| 554 | ··-·enable_strategy | 559 | ··-·enable_strategy |
| 555 | ··-·low_complexity | 560 | ··-·low_complexity |
| 556 | ··-·low_disruption | 561 | ··-·low_disruption |
| 557 | ··-·medium_severity | 562 | ··-·medium_severity |
| 558 | ··-·no_reboot_needed | 563 | ··-·no_reboot_needed |
| 559 | ··-·package_sudo_installed | 564 | ··-·package_sudo_installed |
| 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 565 | include·install_sudo | ||
| Max diff block lines reached; 48962/54593 bytes (89.69%) of diff not shown. | |||
| Offset 14343, 15 lines modified | Offset 14343, 15 lines modified | ||
| 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | 00038060:·6f72·793c·2f68·323e·3c70·3e43·7572·7265··ory</h2><p>Curre | ||
| 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | 00038070:·6e74·2076·6572·7369·6f6e·3a20·3c73·7472··nt·version:·<str | ||
| 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | 00038080:·6f6e·673e·302e·312e·3734·3c2f·7374·726f··ong>0.1.74</stro | ||
| 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | 00038090:·6e67·3e3c·2f70·3e3c·756c·3e3c·6c69·3e3c··ng></p><ul><li>< | ||
| 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | 000380a0:·7374·726f·6e67·3e64·7261·6674·3c2f·7374··strong>draft</st | ||
| 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | 000380b0:·726f·6e67·3e0a·2020·2020·2020·2020·2020··rong>.·········· | ||
| 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | 000380c0:·2020·2020·2020·2020·2020·2861·7320·6f66············(as·of | ||
| 000380d0:·2032·3032·3 | 000380d0:·2032·3032·352d·3031·2d32·3329·0a20·2020···2025-01-23).··· | ||
| 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | 000380e0:·2020·2020·2020·2020·2020·2020·203c·2f6c···············</l | ||
| 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | 000380f0:·693e·3c2f·756c·3e3c·2f64·6976·3e3c·6832··i></ul></div><h2 | ||
| 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | 00038100:·3e54·6162·6c65·206f·6620·436f·6e74·656e··>Table·of·Conten | ||
| 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | 00038110:·7473·3c2f·6832·3e3c·6f6c·3e3c·6c69·3e3c··ts</h2><ol><li>< | ||
| 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | 00038120:·6120·6872·6566·3d22·2378·6363·6466·5f6f··a·href="#xccdf_o | ||
| 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | 00038130:·7267·2e73·7367·7072·6f6a·6563·742e·636f··rg.ssgproject.co | ||
| 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | 00038140:·6e74·656e·745f·6772·6f75·705f·7379·7374··ntent_group_syst | ||
| Offset 14793, 146 lines modified | Offset 14793, 146 lines modified | ||
| 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | 00039c80:·2d74·6172·6765·743d·2223·6964·6d38·3839··-target="#idm889 | ||
| 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | 00039c90:·3122·2074·6162·696e·6465·783d·2230·2220··1"·tabindex="0"· | ||
| 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | 00039ca0:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | ||
| 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | 00039cb0:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | ||
| 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | 00039cc0:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | ||
| 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | 00039cd0:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | ||
| 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | 00039ce0:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | ||
| 00039cf0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 00039d00:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 00039d10:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 00039d20:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 00039d30:·7073·6522·2069·643d·2269·646d·3838·3931··pse"·id="idm8891 | |||
| 00039d40:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 00039d50:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 00039d60:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 00039d70:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 00039d80:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 00039d90:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 00039da0:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00039db0:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 00039dc0:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00039dd0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 00039de0:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 00039df0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | |||
| 00039e00:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | |||
| 00039e10:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 00039e20:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 00039e30:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 00039e40:·3a20·456e·7375·7265·2064·6e66·2d61·7574··:·Ensure·dnf-aut | |||
| 00039e50:·6f6d·6174·6963·2069·7320·696e·7374·616c··omatic·is·instal | |||
| 00039e60:·6c65·640a·2020·7061·636b·6167·653a·0a20··led.··package:.· | |||
| 00039e70:·2020·206e·616d·653a·2064·6e66·2d61·7574·····name:·dnf-aut | |||
| 00039e80:·6f6d·6174·6963·0a20·2020·2073·7461·7465··omatic.····state | |||
| 00039e90:·3a20·7072·6573·656e·740a·2020·7461·6773··:·present.··tags | |||
| 00039ea0:·3a0a·2020·2d20·4343·452d·3931·3136·332d··:.··-·CCE-91163- | |||
| 00039eb0:·360a·2020·2d20·656e·6162·6c65·5f73·7472··6.··-·enable_str | |||
| 00039ec0:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 00039ed0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 00039ee0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 00039ef0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 00039f00:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 00039f10:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 00039f20:·5f64·6e66·2d61·7574·6f6d·6174·6963·5f69··_dnf-automatic_i | |||
| 00039f30:·6e73·7461·6c6c·6564·0a3c·2f63·6f64·653e··nstalled.</code> | |||
| 00039f40:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 00039f50:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 00039f60:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 00039f70:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 00039f80:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 00039f90:·3839·3222·2074·6162·696e·6465·783d·2230··892"·tabindex="0 | |||
| 00039fa0:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 00039fb0:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 00039fc0:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 00039fd0:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 00039fe0:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 00039ff0:·6961·7469·6f6e·2050·7570·7065·7420·736e··iation·Puppet·sn | |||
| 0003a000:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003a010:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003a020:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003a030:·6170·7365·2220·6964·3d22·6964·6d38·3839··apse"·id="idm889 | |||
| 0003a040:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003a050:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003a060:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 0003a070:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 0003a080:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003a090:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003a0a0:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003a0b0:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003a0c0:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003a0d0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | |||
| 0003a0e0:·6562·6f6f·743a·3c2f·7468·3e3c·7464·3e66··eboot:</th><td>f | |||
| 0003a0f0:·616c·7365·3c2f·7464·3e3c·2f74·723e·3c74··alse</td></tr><t | |||
| 0003a100:·723e·3c74·683e·5374·7261·7465·6779·3a3c··r><th>Strategy:< | |||
| 0003a110:·2f74·683e·3c74·643e·656e·6162·6c65·3c2f··/th><td>enable</ | |||
| 0003a120:·7464·3e3c·2f74·723e·3c2f·7461·626c·653e··td></tr></table> | |||
| 0003a130:·3c70·7265·3e3c·636f·6465·3e69·6e63·6c75··<pre><code>inclu | |||
| 0003a140:·6465·2069·6e73·7461·6c6c·5f64·6e66·2d61··de·install_dnf-a | |||
| 0003a150:·7574·6f6d·6174·6963·0a0a·636c·6173·7320··utomatic..class· | |||
| 0003a160:·696e·7374·616c·6c5f·646e·662d·6175·746f··install_dnf-auto | |||
| 0003a170:·6d61·7469·6320·7b0a·2020·7061·636b·6167··matic·{.··packag | |||
| 0003a180:·6520·7b20·2764·6e66·2d61·7574·6f6d·6174··e·{·'dnf-automat | |||
| 0003a190:·6963·273a·0a20·2020·2065·6e73·7572·6520··ic':.····ensure· | |||
| 0003a1a0:·3d26·6774·3b20·2769·6e73·7461·6c6c·6564··=>·'installed | |||
| 0003a1b0:·272c·0a20·207d·0a7d·0a3c·2f63·6f64·653e··',.··}.}.</code> | |||
| 0003a1c0:·3c2f·7072·653e·3c2f·6469·763e·3c61·2063··</pre></div><a·c | |||
| 0003a1d0:·6c61·7373·3d22·6274·6e20·6274·6e2d·7375··lass="btn·btn-su | |||
| 0003a1e0:·6363·6573·7322·2064·6174·612d·746f·6767··ccess"·data-togg | |||
| 0003a1f0:·6c65·3d22·636f·6c6c·6170·7365·2220·6461··le="collapse"·da | |||
| 0003a200:·7461·2d74·6172·6765·743d·2223·6964·6d38··ta-target="#idm8 | |||
| 0003a210:·3839·3322·2074·6162·696e·6465·783d·2230··893"·tabindex="0 | |||
| 0003a220:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | |||
| 0003a230:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | |||
| 0003a240:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | |||
| 0003a250:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | |||
| 0003a260:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | |||
| 0003 | 00039cf0:·7469·6f6e·204f·5342·7569·6c64·2042·6c75··tion·OSBuild·Blu | ||
| 0003 | 00039d00:·6570·7269·6e74·2073·6e69·7070·6574·20e2··eprint·snippet·. | ||
| 0003 | 00039d10:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | ||
| 0003 | 00039d20:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | ||
| 0003 | 00039d30:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | ||
| 0003 | 00039d40:·643d·2269·646d·3838·3931·223e·3c70·7265··d="idm8891"><pre | ||
| 0003 | 00039d50:·3e3c·636f·6465·3e0a·5b5b·7061·636b·6167··><code>.[[packag | ||
| 0003 | 00039d60:·6573·5d5d·0a6e·616d·6520·3d20·2264·6e66··es]].name·=·"dnf | ||
| 0003 | 00039d70:·2d61·7574·6f6d·6174·6963·220a·7665·7273··-automatic".vers | ||
| 0003 | 00039d80:·696f·6e20·3d20·222a·220a·3c2f·636f·6465··ion·=·"*".</code | ||
| 00039d90:·3e3c·2f70·7265·3e3c·2f64·6976·3e3c·6120··></pre></div><a· | |||
| 00039da0:·636c·6173·733d·2262·746e·2062·746e·2d73··class="btn·btn-s | |||
| 00039db0:·7563·6365·7373·2220·6461·7461·2d74·6f67··uccess"·data-tog | |||
| 00039dc0:·676c·653d·2263·6f6c·6c61·7073·6522·2064··gle="collapse"·d | |||
| 00039dd0:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | |||
| 00039de0:·3838·3932·2220·7461·6269·6e64·6578·3d22··8892"·tabindex=" | |||
| Max diff block lines reached; 151452/171378 bytes (88.37%) of diff not shown. | |||
| Offset 49, 15 lines modified | Offset 49, 15 lines modified | ||
| 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) | 49 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·ANSSI-BP-028·(minimal) |
| 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal | 50 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_anssi_bp28_minimal |
| 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 51 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 52 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 53 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 54 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 55 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 56 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 57 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 58 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 59 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 60 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 61 | ·········3.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 62 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P | 63 | ·········1.·_\x8D_\x8H_\x8C_\x8P |
| Offset 87, 14 lines modified | Offset 87, 19 lines modified | ||
| 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade | 87 | Rationale:···dnf-automatic·is·an·alternative·command·line·interface·(CLI)·to·dnf·upgrade |
| 88 | ·············suitable·for·automatic,·regular·execution. | 88 | ·············suitable·for·automatic,·regular·execution. |
| 89 | Severity: ···medium | 89 | Severity: ···medium |
| 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed | 90 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_dnf-automatic_installed |
| 91 | Identifiers:·CCE-91163-6 | 91 | Identifiers:·CCE-91163-6 |
| 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 | 92 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000191-GPOS-00080 |
| 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 | 93 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··R61 |
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 95 | [[packages]] | ||
| 96 | name·=·"dnf-automatic" | ||
| 97 | version·=·"*" | ||
| 94 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 98 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 95 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 99 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 96 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 100 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 97 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 101 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 98 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 102 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 99 | -·name:·Ensure·dnf-automatic·is·installed | 103 | -·name:·Ensure·dnf-automatic·is·installed |
| 100 | ··package: | 104 | ··package: |
| Offset 104, 38 lines modified | Offset 109, 33 lines modified | ||
| 104 | ··-·CCE-91163-6 | 109 | ··-·CCE-91163-6 |
| 105 | ··-·enable_strategy | 110 | ··-·enable_strategy |
| 106 | ··-·low_complexity | 111 | ··-·low_complexity |
| 107 | ··-·low_disruption | 112 | ··-·low_disruption |
| 108 | ··-·medium_severity | 113 | ··-·medium_severity |
| 109 | ··-·no_reboot_needed | 114 | ··-·no_reboot_needed |
| 110 | ··-·package_dnf-automatic_installed | 115 | ··-·package_dnf-automatic_installed |
| 116 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 117 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 118 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 119 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 120 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 121 | zypper·install·-y·"dnf-automatic" | ||
| 111 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 112 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 123 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 113 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 124 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 114 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 125 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 115 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 126 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 116 | include·install_dnf-automatic | 127 | include·install_dnf-automatic |
| 117 | class·install_dnf-automatic·{ | 128 | class·install_dnf-automatic·{ |
| 118 | ··package·{·'dnf-automatic': | 129 | ··package·{·'dnf-automatic': |
| 119 | ····ensure·=>·'installed', | 130 | ····ensure·=>·'installed', |
| 120 | ··} | 131 | ··} |
| 121 | } | 132 | } |
| 122 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 123 | [[packages]] | ||
| 124 | name·=·"dnf-automatic" | ||
| 125 | version·=·"*" | ||
| 126 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | ||
| 127 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 128 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 129 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 130 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 131 | zypper·install·-y·"dnf-automatic" | ||
| 132 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 133 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·d\x8dn\x8nf\x8f-\x8-a\x8au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8c·t\x8to\x8o·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·A\x8Av\x8va\x8ai\x8il\x8la\x8ab\x8bl\x8le\x8e·U\x8Up\x8pd\x8da\x8at\x8te\x8es\x8s·A\x8Au\x8ut\x8to\x8om\x8ma\x8at\x8ti\x8ic\x8ca\x8al\x8ll\x8ly\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 133 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically | 134 | To·ensure·that·the·packages·comprising·the·available·updates·will·be·automatically |
| 134 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ | 135 | installed·by·dnf-automatic,·set·apply_updates·to·yes·under·[commands]·section·in·/etc/dnf/ |
| 135 | automatic.conf. | 136 | automatic.conf. |
| 136 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the | 137 | ·············Installing·software·updates·is·a·fundamental·mitigation·against·the |
| 137 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security | 138 | ·············exploitation·of·publicly-known·vulnerabilities.·If·the·most·recent·security |
| 138 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage | 139 | Rationale:···patches·and·updates·are·not·installed,·unauthorized·users·may·take·advantage |
| Offset 6944, 39 lines modified | Offset 6944, 39 lines modified | ||
| 6944 | ··-·PCI-DSSv4-2.2.4 | 6944 | ··-·PCI-DSSv4-2.2.4 |
| 6945 | ··-·disable_strategy | 6945 | ··-·disable_strategy |
| 6946 | ··-·low_complexity | 6946 | ··-·low_complexity |
| 6947 | ··-·low_disruption | 6947 | ··-·low_disruption |
| 6948 | ··-·medium_severity | 6948 | ··-·medium_severity |
| 6949 | ··-·no_reboot_needed | 6949 | ··-·no_reboot_needed |
| 6950 | ··-·package_dhcp_removed | 6950 | ··-·package_dhcp_removed |
| 6951 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6952 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6953 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6954 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6955 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 6956 | include·remove_dhcp-server | ||
| 6957 | class·remove_dhcp-server·{ | ||
| 6958 | ··package·{·'dhcp-server': | ||
| 6959 | ····ensure·=>·'purged', | ||
| 6960 | ··} | ||
| 6961 | } | ||
| 6962 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 6951 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 6963 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 6952 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 6964 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 6953 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 6965 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 6954 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 6966 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 6955 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 6967 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server | 6956 | #·CAUTION:·This·remediation·script·will·remove·dhcp-server |
| 6968 | #» ···from·the·system,·and·may·remove·any·packages | 6957 | #» ···from·the·system,·and·may·remove·any·packages |
| 6969 | #» ···that·depend·on·dhcp-server.·Execute·this | 6958 | #» ···that·depend·on·dhcp-server.·Execute·this |
| 6970 | #» ···remediation·AFTER·testing·on·a·non-production | 6959 | #» ···remediation·AFTER·testing·on·a·non-production |
| 6971 | #» ···system! | 6960 | #» ···system! |
| 6972 | zypper·remove·-y·"dhcp-server" | 6961 | zypper·remove·-y·"dhcp-server" |
| 6962 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 6963 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 6964 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 6965 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 6966 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 6967 | include·remove_dhcp-server | ||
| 6968 | class·remove_dhcp-server·{ | ||
| 6969 | ··package·{·'dhcp-server': | ||
| 6970 | ····ensure·=>·'purged', | ||
| 6971 | ··} | ||
| 6972 | } | ||
| 6973 | Group ·Mail·Server·Software· Group·contains·1·rule | 6973 | Group ·Mail·Server·Software· Group·contains·1·rule |
| Max diff block lines reached; 22975/28344 bytes (81.06%) of diff not shown. | |||
| Offset 14312, 15 lines modified | Offset 14312, 15 lines modified | ||
| 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e70:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037e80:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037e90:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ea0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037eb0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ec0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ed0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037ee0:·323 | 00037ee0:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037ef0:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f00:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f10:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f20:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f30:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f40:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f50:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15171, 167 lines modified | Offset 15171, 167 lines modified | ||
| 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | 0003b420:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | ||
| 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | 0003b430:·3332·2220·7461·6269·6e64·6578·3d22·3022··32"·tabindex="0" | ||
| 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | 0003b440:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | ||
| 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | 0003b450:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | ||
| 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | 0003b460:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | ||
| 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | 0003b470:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | ||
| 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | 0003b480:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | ||
| 0003b490:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 0003b4a0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 0003b4b0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 0003b4c0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 0003b4d0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 0003b4e0:·3222·3e3c·7461·626c·6520·636c·6173·733d··2"><table·class= | |||
| 0003b4f0:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 0003b | 0003b490:·6174·696f·6e20·4f53·4275·696c·6420·426c··ation·OSBuild·Bl | ||
| 0003b4a0:·7565·7072·696e·7420·736e·6970·7065·7420··ueprint·snippet· | |||
| 0003b4b0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b4c0:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b4d0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b4e0:·6964·3d22·6964·6d36·3333·3222·3e3c·7072··id="idm6332"><pr | |||
| 0003b4f0:·653e·3c63·6f64·653e·0a5b·5b70·6163·6b61··e><code>.[[packa | |||
| 0003b500:·6765·735d·5d0a·6e61·6d65·203d·2022·6169··ges]].name·=·"ai | |||
| 0003b510:·6465·220a·7665·7273·696f·6e20·3d20·222a··de".version·=·"* | |||
| 0003b520:·220a·3c2f·636f·6465·3e3c·2f70·7265·3e3c··".</code></pre>< | |||
| 0003b530:·2f64·6976·3e3c·6120·636c·6173·733d·2262··/div><a·class="b | |||
| 0003b540:·746e·2062·746e·2d73·7563·6365·7373·2220··tn·btn-success"· | |||
| 0003b550:·6461·7461·2d74·6f67·676c·653d·2263·6f6c··data-toggle="col | |||
| 0003b560:·6c61·7073·6522·2064·6174·612d·7461·7267··lapse"·data-targ | |||
| 0003b570:·6574·3d22·2369·646d·3633·3333·2220·7461··et="#idm6333"·ta | |||
| 0003b580:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 0003b590:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 0003b5a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 0003b5b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 0003b5c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 0003b5d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 0003b5e0:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0003b5f0:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0003b600:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0003b610:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0003b620:·6964·3d22·6964·6d36·3333·3322·3e3c·7461··id="idm6333"><ta | |||
| 0003b630:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0003b640:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0003b650:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0003b660:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0003b670:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0003b680:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0003b690:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6a0:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0003b6b0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b6c0:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0003b6d0:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0003b6e0:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0003b6f0:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0003b700:·643e·656e·6162·6c65·3c2f·7464·3e3c·2f74··d>enable</td></t | |||
| 0003b710:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0003b720:·636f·6465·3e2d·206e·616d·653a·2045·6e73··code>-·name:·Ens | |||
| 0003b730:·7572·6520·6169·6465·2069·7320·696e·7374··ure·aide·is·inst | |||
| 0003b740:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0003b750:·0a20·2020·206e·616d·653a·2061·6964·650a··.····name:·aide. | |||
| 0003b760:·2020·2020·7374·6174·653a·2070·7265·7365······state:·prese | |||
| 0003b770:·6e74·0a20·2077·6865·6e3a·2061·6e73·6962··nt.··when:·ansib | |||
| 0003b780:·6c65·5f76·6972·7475·616c·697a·6174·696f··le_virtualizatio | |||
| 0003b790:·6e5f·7479·7065·206e·6f74·2069·6e20·5b22··n_type·not·in·[" | |||
| 0003b7a0:·646f·636b·6572·222c·2022·6c78·6322·2c20··docker",·"lxc",· | |||
| 0003b7b0:·226f·7065·6e76·7a22·2c20·2270·6f64·6d61··"openvz",·"podma | |||
| 0003b7c0:·6e22·2c20·2263·6f6e·7461·696e·6572·225d··n",·"container"] | |||
| 0003b7d0:·0a20·2074·6167·733a·0a20·202d·2043·4345··.··tags:.··-·CCE | |||
| 0003b7e0:·2d38·3332·3839·2d39·0a20·202d·2043·4a49··-83289-9.··-·CJI | |||
| 0003b7f0:·532d·352e·3130·2e31·2e33·0a20·202d·2044··S-5.10.1.3.··-·D | |||
| 0003b800:·4953·412d·5354·4947·2d53·4c45·532d·3135··ISA-STIG-SLES-15 | |||
| 0003b810:·2d30·3130·3431·390a·2020·2d20·4e49·5354··-010419.··-·NIST | |||
| 0003b820:·2d38·3030·2d35·332d·434d·2d36·2861·290a··-800-53-CM-6(a). | |||
| 0003b830:·2020·2d20·5043·492d·4453·532d·5265·712d····-·PCI-DSS-Req- | |||
| 0003b840:·3131·2e35·0a20·202d·2050·4349·2d44·5353··11.5.··-·PCI-DSS | |||
| 0003b850:·7634·2d31·312e·352e·320a·2020·2d20·656e··v4-11.5.2.··-·en | |||
| 0003b860:·6162·6c65·5f73·7472·6174·6567·790a·2020··able_strategy.·· | |||
| 0003b870:·2d20·6c6f·775f·636f·6d70·6c65·7869·7479··-·low_complexity | |||
| 0003b880:·0a20·202d·206c·6f77·5f64·6973·7275·7074··.··-·low_disrupt | |||
| 0003b890:·696f·6e0a·2020·2d20·6d65·6469·756d·5f73··ion.··-·medium_s | |||
| 0003b8a0:·6576·6572·6974·790a·2020·2d20·6e6f·5f72··everity.··-·no_r | |||
| 0003b8b0:·6562·6f6f·745f·6e65·6564·6564·0a20·202d··eboot_needed.··- | |||
| 0003b8c0:·2070·6163·6b61·6765·5f61·6964·655f·696e···package_aide_in | |||
| 0003b8d0:·7374·616c·6c65·640a·3c2f·636f·6465·3e3c··stalled.</code>< | |||
| 0003b8e0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 0003b8f0:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 0003b900:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 0003b910:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 0003b920:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 0003b930:·3334·2220·7461·6269·6e64·6578·3d22·3022··34"·tabindex="0" | |||
| 0003b940:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 0003b950:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 0003b960:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 0003b970:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 0003b980:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 0003b990:·6174·696f·6e20·5368·656c·6c20·7363·7269··ation·Shell·scri | |||
| 0003b9a0:·7074·20e2·87b2·3c2f·613e·3c62·723e·3c64··pt·...</a><br><d | |||
| 0003b9b0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b9c0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b9d0:·6522·2069·643d·2269·646d·3633·3334·223e··e"·id="idm6334"> | |||
| 0003b9e0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b9f0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b | 0003ba00:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | ||
| 0003ba10:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003ba20:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 0003b530:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 0003b540:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0003b550:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 0003b | 0003ba30:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | ||
| 0003ba40:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003ba50:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| Max diff block lines reached; 1677880/1700704 bytes (98.66%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·2·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 128, 14 lines modified | Offset 128, 19 lines modified | ||
| 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 128 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 129 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 130 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 131 | ·············_\x8c_\x8i_\x8s············1.4.1 | 131 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 132 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 133 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 134 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 136 | [[packages]] | ||
| 137 | name·=·"aide" | ||
| 138 | version·=·"*" | ||
| 135 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 139 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 136 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 140 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 137 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 141 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 138 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 142 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 139 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 143 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 140 | -·name:·Ensure·aide·is·installed | 144 | -·name:·Ensure·aide·is·installed |
| 141 | ··package: | 145 | ··package: |
| Offset 151, 44 lines modified | Offset 156, 39 lines modified | ||
| 151 | ··-·PCI-DSSv4-11.5.2 | 156 | ··-·PCI-DSSv4-11.5.2 |
| 152 | ··-·enable_strategy | 157 | ··-·enable_strategy |
| 153 | ··-·low_complexity | 158 | ··-·low_complexity |
| 154 | ··-·low_disruption | 159 | ··-·low_disruption |
| 155 | ··-·medium_severity | 160 | ··-·medium_severity |
| 156 | ··-·no_reboot_needed | 161 | ··-·no_reboot_needed |
| 157 | ··-·package_aide_installed | 162 | ··-·package_aide_installed |
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 163 | include·install_aide | ||
| 164 | class·install_aide·{ | ||
| 165 | ··package·{·'aide': | ||
| 166 | ····ensure·=>·'installed', | ||
| 167 | ··} | ||
| 168 | } | ||
| 169 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 170 | [[packages]] | ||
| 171 | name·=·"aide" | ||
| 172 | version·=·"*" | ||
| 173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 164 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 165 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 166 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 167 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 178 | #·Remediation·is·applicable·only·in·certain·platforms | 168 | #·Remediation·is·applicable·only·in·certain·platforms |
| 179 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 169 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 180 | zypper·install·-y·"aide" | 170 | zypper·install·-y·"aide" |
| 181 | else | 171 | else |
| 182 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 172 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 183 | fi | 173 | fi |
| 174 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 175 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 176 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 177 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 178 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 179 | include·install_aide | ||
| 180 | class·install_aide·{ | ||
| 181 | ··package·{·'aide': | ||
| 182 | ····ensure·=>·'installed', | ||
| 183 | ··} | ||
| 184 | } | ||
| 184 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 185 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 185 | Run·the·following·command·to·generate·a·new·database: | 186 | Run·the·following·command·to·generate·a·new·database: |
| 186 | $·sudo·/usr/bin/aide·--init | 187 | $·sudo·/usr/bin/aide·--init |
| 187 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 188 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 188 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 189 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 189 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 190 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 190 | generated·database·can·be·installed·as·follows: | 191 | generated·database·can·be·installed·as·follows: |
| Offset 837, 26 lines modified | Offset 837, 14 lines modified | ||
| 837 | ··-·NIST-800-53-CM-7(b) | 837 | ··-·NIST-800-53-CM-7(b) |
| 838 | ··-·disable_strategy | 838 | ··-·disable_strategy |
| 839 | ··-·low_complexity | 839 | ··-·low_complexity |
| 840 | ··-·low_disruption | 840 | ··-·low_disruption |
| 841 | ··-·medium_severity | 841 | ··-·medium_severity |
| 842 | ··-·no_reboot_needed | 842 | ··-·no_reboot_needed |
| 843 | ··-·package_gdm_removed | 843 | ··-·package_gdm_removed |
| 844 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 845 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 846 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 847 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 848 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 849 | include·remove_gdm | ||
| 850 | class·remove_gdm·{ | ||
| 851 | ··package·{·'gdm': | ||
| 852 | ····ensure·=>·'purged', | ||
| 853 | ··} | ||
| 854 | } | ||
| 855 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 844 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 856 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 845 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 857 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 846 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 858 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 847 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 859 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 848 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 860 | #·Remediation·is·applicable·only·in·certain·platforms | 849 | #·Remediation·is·applicable·only·in·certain·platforms |
| 861 | if·rpm·--quiet·-q·gdm;·then | 850 | if·rpm·--quiet·-q·gdm;·then |
| Offset 868, 14 lines modified | Offset 856, 26 lines modified | ||
| 868 | #» ···system! | 856 | #» ···system! |
| 869 | zypper·remove·-y·"gdm" | 857 | zypper·remove·-y·"gdm" |
| 870 | else | 858 | else |
| 871 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 859 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 872 | fi | 860 | fi |
| Max diff block lines reached; 174631/180222 bytes (96.90%) of diff not shown. | |||
| Offset 14312, 16 lines modified | Offset 14312, 16 lines modified | ||
| 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037e70:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037e80:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037e90:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037ea0:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037eb0:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037ec0:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037ed0:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037ee0:·2028·6173·206f·6620·3230·323 | 00037ee0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037ef0:·323 | 00037ef0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037f00:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037f10:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037f20:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037f30:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00037f40:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00037f50:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00037f60:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 15149, 168 lines modified | Offset 15149, 168 lines modified | ||
| 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 0003b2c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | 0003b2d0:·6d36·3333·3222·2074·6162·696e·6465·783d··m6332"·tabindex= | ||
| 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | 0003b2e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | ||
| 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | 0003b2f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | ||
| 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | 0003b300:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | ||
| 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | 0003b310:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | ||
| 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | 0003b320:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | ||
| 0003b330:·6564·6961·7469·6f6e·204 | 0003b330:·6564·6961·7469·6f6e·204f·5342·7569·6c64··ediation·OSBuild | ||
| 0003b340:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b350:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b360:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b370:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b380:·3633·3332·223e·3c74·6162·6c65·2063·6c61··6332"><table·cla | |||
| 0003b390:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b3a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b3b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b3c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b3d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b3e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b3f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b400:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b410:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b420:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b430:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | |||
| 0003b440:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | |||
| 0003b | 0003b340:·2042·6c75·6570·7269·6e74·2073·6e69·7070···Blueprint·snipp | ||
| 0003b350:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b360:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b370:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b380:·6522·2069·643d·2269·646d·3633·3332·223e··e"·id="idm6332"> | |||
| 0003b390:·3c70·7265·3e3c·636f·6465·3e0a·5b5b·7061··<pre><code>.[[pa | |||
| 0003b3a0:·636b·6167·6573·5d5d·0a6e·616d·6520·3d20··ckages]].name·=· | |||
| 0003b3b0:·2261·6964·6522·0a76·6572·7369·6f6e·203d··"aide".version·= | |||
| 0003b3c0:·2022·2a22·0a3c·2f63·6f64·653e·3c2f·7072···"*".</code></pr | |||
| 0003b3d0:·653e·3c2f·6469·763e·3c61·2063·6c61·7373··e></div><a·class | |||
| 0003b3e0:·3d22·6274·6e20·6274·6e2d·7375·6363·6573··="btn·btn-succes | |||
| 0003b3f0:·7322·2064·6174·612d·746f·6767·6c65·3d22··s"·data-toggle=" | |||
| 0003b400:·636f·6c6c·6170·7365·2220·6461·7461·2d74··collapse"·data-t | |||
| 0003b410:·6172·6765·743d·2223·6964·6d36·3333·3322··arget="#idm6333" | |||
| 0003b420:·2074·6162·696e·6465·783d·2230·2220·726f···tabindex="0"·ro | |||
| 0003b430:·6c65·3d22·6275·7474·6f6e·2220·6172·6961··le="button"·aria | |||
| 0003b440:·2d65·7870·616e·6465·643d·2266·616c·7365··-expanded="false | |||
| 0003b450:·2220·7469·746c·653d·2241·6374·6976·6174··"·title="Activat | |||
| 0003b460:·6520·746f·2072·6576·6561·6c22·2068·7265··e·to·reveal"·hre | |||
| 0003b470:·663d·2223·2122·3e52·656d·6564·6961·7469··f="#!">Remediati | |||
| 0003b480:·6f6e·2041·6e73·6962·6c65·2073·6e69·7070··on·Ansible·snipp | |||
| 0003b490:·6574·20e2·87b2·3c2f·613e·3c62·723e·3c64··et·...</a><br><d | |||
| 0003b4a0:·6976·2063·6c61·7373·3d22·7061·6e65·6c2d··iv·class="panel- | |||
| 0003b4b0:·636f·6c6c·6170·7365·2063·6f6c·6c61·7073··collapse·collaps | |||
| 0003b4c0:·6522·2069·643d·2269·646d·3633·3333·223e··e"·id="idm6333"> | |||
| 0003b4d0:·3c74·6162·6c65·2063·6c61·7373·3d22·7461··<table·class="ta | |||
| 0003b4e0:·626c·6520·7461·626c·652d·7374·7269·7065··ble·table-stripe | |||
| 0003b4f0:·6420·7461·626c·652d·626f·7264·6572·6564··d·table-bordered | |||
| 0003b500:·2074·6162·6c65·2d63·6f6e·6465·6e73·6564···table-condensed | |||
| 0003b510:·223e·3c74·723e·3c74·683e·436f·6d70·6c65··"><tr><th>Comple | |||
| 0003b520:·7869·7479·3a3c·2f74·683e·3c74·643e·6c6f··xity:</th><td>lo | |||
| 0003b530:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b540:·7468·3e44·6973·7275·7074·696f·6e3a·3c2f··th>Disruption:</ | |||
| 0003b550:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 0003b560:·2f74·723e·3c74·723e·3c74·683e·5265·626f··/tr><tr><th>Rebo | |||
| 0003b570:·6f74·3a3c·2f74·683e·3c74·643e·6661·6c73··ot:</th><td>fals | |||
| 0003b | 0003b580:·653c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··e</td></tr><tr>< | ||
| 0003b470:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b480:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b490:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b4a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b4b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b4c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b4d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b4e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b4f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b500:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b510:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b520:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b530:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b540:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b550:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b560:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b570:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b580:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| 0003b590:·2d44·5353·2d52·6571·2d31·312e·350a·2020··-DSS-Req-11.5.·· | |||
| 0003b5a0:·2d20·5043·492d·4453·5376·342d·3131·2e35··-·PCI-DSSv4-11.5 | |||
| 0003b5b0:·2e32·0a20·202d·2065·6e61·626c·655f·7374··.2.··-·enable_st | |||
| 0003b5c0:·7261·7465·6779·0a20·202d·206c·6f77·5f63··rategy.··-·low_c | |||
| 0003b5d0:·6f6d·706c·6578·6974·790a·2020·2d20·6c6f··omplexity.··-·lo | |||
| 0003b5e0:·775f·6469·7372·7570·7469·6f6e·0a20·202d··w_disruption.··- | |||
| 0003b5f0:·206d·6564·6975·6d5f·7365·7665·7269·7479···medium_severity | |||
| 0003b600:·0a20·202d·206e·6f5f·7265·626f·6f74·5f6e··.··-·no_reboot_n | |||
| 0003b610:·6565·6465·640a·2020·2d20·7061·636b·6167··eeded.··-·packag | |||
| 0003b | 0003b590:·7468·3e53·7472·6174·6567·793a·3c2f·7468··th>Strategy:</th | ||
| 0003b5a0:·3e3c·7464·3e65·6e61·626c·653c·2f74·643e··><td>enable</td> | |||
| 0003b5b0:·3c2f·7472·3e3c·2f74·6162·6c65·3e3c·7072··</tr></table><pr | |||
| 0003b5c0:·653e·3c63·6f64·653e·2d20·6e61·6d65·3a20··e><code>-·name:· | |||
| 0003b5d0:·456e·7375·7265·2061·6964·6520·6973·2069··Ensure·aide·is·i | |||
| 0003b5e0:·6e73·7461·6c6c·6564·0a20·2070·6163·6b61··nstalled.··packa | |||
| 0003b5f0:·6765·3a0a·2020·2020·6e61·6d65·3a20·6169··ge:.····name:·ai | |||
| 0003b600:·6465·0a20·2020·2073·7461·7465·3a20·7072··de.····state:·pr | |||
| 0003b610:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0003b620:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0003b630:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0003b640:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0003b650:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0003b660:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0003b670:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0003b680:·4343·452d·3833·3238·392d·390a·2020·2d20··CCE-83289-9.··-· | |||
| 0003b690:·434a·4953·2d35·2e31·302e·312e·330a·2020··CJIS-5.10.1.3.·· | |||
| 0003b6a0:·2d20·4449·5341·2d53·5449·472d·534c·4553··-·DISA-STIG-SLES | |||
| 0003b6b0:·2d31·352d·3031·3034·3139·0a20·202d·204e··-15-010419.··-·N | |||
| 0003b6c0:·4953·542d·3830·302d·3533·2d43·4d2d·3628··IST-800-53-CM-6( | |||
| 0003b6d0:·6129·0a20·202d·2050·4349·2d44·5353·2d52··a).··-·PCI-DSS-R | |||
| Max diff block lines reached; 1479396/1502496 bytes (98.46%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Server |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_server_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 125, 14 lines modified | Offset 125, 19 lines modified | ||
| 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 125 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 126 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 127 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 128 | ·············_\x8c_\x8i_\x8s············1.4.1 | 128 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 129 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 130 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 131 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 133 | [[packages]] | ||
| 134 | name·=·"aide" | ||
| 135 | version·=·"*" | ||
| 132 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 133 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 134 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 135 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 136 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 137 | -·name:·Ensure·aide·is·installed | 141 | -·name:·Ensure·aide·is·installed |
| 138 | ··package: | 142 | ··package: |
| Offset 148, 44 lines modified | Offset 153, 39 lines modified | ||
| 148 | ··-·PCI-DSSv4-11.5.2 | 153 | ··-·PCI-DSSv4-11.5.2 |
| 149 | ··-·enable_strategy | 154 | ··-·enable_strategy |
| 150 | ··-·low_complexity | 155 | ··-·low_complexity |
| 151 | ··-·low_disruption | 156 | ··-·low_disruption |
| 152 | ··-·medium_severity | 157 | ··-·medium_severity |
| 153 | ··-·no_reboot_needed | 158 | ··-·no_reboot_needed |
| 154 | ··-·package_aide_installed | 159 | ··-·package_aide_installed |
| 155 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 156 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 157 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 158 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 159 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 160 | include·install_aide | ||
| 161 | class·install_aide·{ | ||
| 162 | ··package·{·'aide': | ||
| 163 | ····ensure·=>·'installed', | ||
| 164 | ··} | ||
| 165 | } | ||
| 166 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 167 | [[packages]] | ||
| 168 | name·=·"aide" | ||
| 169 | version·=·"*" | ||
| 170 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 160 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 171 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 161 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 172 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 162 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 173 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 163 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 174 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 164 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 175 | #·Remediation·is·applicable·only·in·certain·platforms | 165 | #·Remediation·is·applicable·only·in·certain·platforms |
| 176 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 166 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 177 | zypper·install·-y·"aide" | 167 | zypper·install·-y·"aide" |
| 178 | else | 168 | else |
| 179 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 169 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 180 | fi | 170 | fi |
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 176 | include·install_aide | ||
| 177 | class·install_aide·{ | ||
| 178 | ··package·{·'aide': | ||
| 179 | ····ensure·=>·'installed', | ||
| 180 | ··} | ||
| 181 | } | ||
| 181 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 182 | Run·the·following·command·to·generate·a·new·database: | 183 | Run·the·following·command·to·generate·a·new·database: |
| 183 | $·sudo·/usr/bin/aide·--init | 184 | $·sudo·/usr/bin/aide·--init |
| 184 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 185 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 186 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 187 | generated·database·can·be·installed·as·follows: | 188 | generated·database·can·be·installed·as·follows: |
| Offset 727, 26 lines modified | Offset 727, 14 lines modified | ||
| 727 | ··-·NIST-800-53-CM-7(b) | 727 | ··-·NIST-800-53-CM-7(b) |
| 728 | ··-·disable_strategy | 728 | ··-·disable_strategy |
| 729 | ··-·low_complexity | 729 | ··-·low_complexity |
| 730 | ··-·low_disruption | 730 | ··-·low_disruption |
| 731 | ··-·medium_severity | 731 | ··-·medium_severity |
| 732 | ··-·no_reboot_needed | 732 | ··-·no_reboot_needed |
| 733 | ··-·package_gdm_removed | 733 | ··-·package_gdm_removed |
| 734 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 735 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 736 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 737 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 738 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 739 | include·remove_gdm | ||
| 740 | class·remove_gdm·{ | ||
| 741 | ··package·{·'gdm': | ||
| 742 | ····ensure·=>·'purged', | ||
| 743 | ··} | ||
| 744 | } | ||
| 745 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 734 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 746 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 735 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 747 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 736 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 748 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 737 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 749 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 738 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 750 | #·Remediation·is·applicable·only·in·certain·platforms | 739 | #·Remediation·is·applicable·only·in·certain·platforms |
| 751 | if·rpm·--quiet·-q·gdm;·then | 740 | if·rpm·--quiet·-q·gdm;·then |
| Offset 758, 14 lines modified | Offset 746, 26 lines modified | ||
| 758 | #» ···system! | 746 | #» ···system! |
| 759 | zypper·remove·-y·"gdm" | 747 | zypper·remove·-y·"gdm" |
| 760 | else | 748 | else |
| 761 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 749 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 762 | fi | 750 | fi |
| Max diff block lines reached; 159746/165347 bytes (96.61%) of diff not shown. | |||
| Offset 14313, 16 lines modified | Offset 14313, 16 lines modified | ||
| 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037e80:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037e90:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037ea0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037eb0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037ec0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037ed0:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037ee0:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037ef0:·2020·2020·2028·6173·206f·6620·3230·323 | 00037ef0:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037f00:·2d30·3 | 00037f00:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037f10:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037f20:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037f30:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037f40:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037f50:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037f60:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037f70:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | ||
| Offset 15135, 168 lines modified | Offset 15135, 168 lines modified | ||
| 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | 0003b1e0:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | ||
| 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | 0003b1f0:·6964·6d36·3333·3222·2074·6162·696e·6465··idm6332"·tabinde | ||
| 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | 0003b200:·783d·2230·2220·726f·6c65·3d22·6275·7474··x="0"·role="butt | ||
| 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | 0003b210:·6f6e·2220·6172·6961·2d65·7870·616e·6465··on"·aria-expande | ||
| 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | 0003b220:·643d·2266·616c·7365·2220·7469·746c·653d··d="false"·title= | ||
| 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | 0003b230:·2241·6374·6976·6174·6520·746f·2072·6576··"Activate·to·rev | ||
| 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | 0003b240:·6561·6c22·2068·7265·663d·2223·2122·3e52··eal"·href="#!">R | ||
| 0003b250:·656d·6564·6961·7469·6f6e·204 | 0003b250:·656d·6564·6961·7469·6f6e·204f·5342·7569··emediation·OSBui | ||
| 0003b260:·6c65·2073·6e69·7070·6574·20e2·87b2·3c2f··le·snippet·...</ | |||
| 0003b270:·613e·3c62·723e·3c64·6976·2063·6c61·7373··a><br><div·class | |||
| 0003b280:·3d22·7061·6e65·6c2d·636f·6c6c·6170·7365··="panel-collapse | |||
| 0003b290:·2063·6f6c·6c61·7073·6522·2069·643d·2269···collapse"·id="i | |||
| 0003b2a0:·646d·3633·3332·223e·3c74·6162·6c65·2063··dm6332"><table·c | |||
| 0003b2b0:·6c61·7373·3d22·7461·626c·6520·7461·626c··lass="table·tabl | |||
| 0003b2c0:·652d·7374·7269·7065·6420·7461·626c·652d··e-striped·table- | |||
| 0003b2d0:·626f·7264·6572·6564·2074·6162·6c65·2d63··bordered·table-c | |||
| 0003b2e0:·6f6e·6465·6e73·6564·223e·3c74·723e·3c74··ondensed"><tr><t | |||
| 0003b2f0:·683e·436f·6d70·6c65·7869·7479·3a3c·2f74··h>Complexity:</t | |||
| 0003b300:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | |||
| 0003b310:·7472·3e3c·7472·3e3c·7468·3e44·6973·7275··tr><tr><th>Disru | |||
| 0003b320:·7074·696f·6e3a·3c2f·7468·3e3c·7464·3e6c··ption:</th><td>l | |||
| 0003b330:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b340:·3c74·683e·5265·626f·6f74·3a3c·2f74·683e··<th>Reboot:</th> | |||
| 0003b350:·3c74·643e·6661·6c73·653c·2f74·643e·3c2f··<td>false</td></ | |||
| 0003b360:·7472·3e3c·7472·3e3c·7468·3e53·7472·6174··tr><tr><th>Strat | |||
| 0003b | 0003b260:·6c64·2042·6c75·6570·7269·6e74·2073·6e69··ld·Blueprint·sni | ||
| 0003b270:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b280:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b290:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b2a0:·7073·6522·2069·643d·2269·646d·3633·3332··pse"·id="idm6332 | |||
| 0003b2b0:·223e·3c70·7265·3e3c·636f·6465·3e0a·5b5b··"><pre><code>.[[ | |||
| 0003b2c0:·7061·636b·6167·6573·5d5d·0a6e·616d·6520··packages]].name· | |||
| 0003b2d0:·3d20·2261·6964·6522·0a76·6572·7369·6f6e··=·"aide".version | |||
| 0003b2e0:·203d·2022·2a22·0a3c·2f63·6f64·653e·3c2f···=·"*".</code></ | |||
| 0003b2f0:·7072·653e·3c2f·6469·763e·3c61·2063·6c61··pre></div><a·cla | |||
| 0003b300:·7373·3d22·6274·6e20·6274·6e2d·7375·6363··ss="btn·btn-succ | |||
| 0003b310:·6573·7322·2064·6174·612d·746f·6767·6c65··ess"·data-toggle | |||
| 0003b320:·3d22·636f·6c6c·6170·7365·2220·6461·7461··="collapse"·data | |||
| 0003b330:·2d74·6172·6765·743d·2223·6964·6d36·3333··-target="#idm633 | |||
| 0003b340:·3322·2074·6162·696e·6465·783d·2230·2220··3"·tabindex="0"· | |||
| 0003b350:·726f·6c65·3d22·6275·7474·6f6e·2220·6172··role="button"·ar | |||
| 0003b360:·6961·2d65·7870·616e·6465·643d·2266·616c··ia-expanded="fal | |||
| 0003b370:·7365·2220·7469·746c·653d·2241·6374·6976··se"·title="Activ | |||
| 0003b380:·6174·6520·746f·2072·6576·6561·6c22·2068··ate·to·reveal"·h | |||
| 0003b390:·7265·663d·2223·2122·3e52·656d·6564·6961··ref="#!">Remedia | |||
| 0003b3a0:·7469·6f6e·2041·6e73·6962·6c65·2073·6e69··tion·Ansible·sni | |||
| 0003b3b0:·7070·6574·20e2·87b2·3c2f·613e·3c62·723e··ppet·...</a><br> | |||
| 0003b3c0:·3c64·6976·2063·6c61·7373·3d22·7061·6e65··<div·class="pane | |||
| 0003b3d0:·6c2d·636f·6c6c·6170·7365·2063·6f6c·6c61··l-collapse·colla | |||
| 0003b3e0:·7073·6522·2069·643d·2269·646d·3633·3333··pse"·id="idm6333 | |||
| 0003b3f0:·223e·3c74·6162·6c65·2063·6c61·7373·3d22··"><table·class=" | |||
| 0003b400:·7461·626c·6520·7461·626c·652d·7374·7269··table·table-stri | |||
| 0003b410:·7065·6420·7461·626c·652d·626f·7264·6572··ped·table-border | |||
| 0003b420:·6564·2074·6162·6c65·2d63·6f6e·6465·6e73··ed·table-condens | |||
| 0003b430:·6564·223e·3c74·723e·3c74·683e·436f·6d70··ed"><tr><th>Comp | |||
| 0003b440:·6c65·7869·7479·3a3c·2f74·683e·3c74·643e··lexity:</th><td> | |||
| 0003b450:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 0003b460:·3e3c·7468·3e44·6973·7275·7074·696f·6e3a··><th>Disruption: | |||
| 0003b470:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0003b480:·3e3c·2f74·723e·3c74·723e·3c74·683e·5265··></tr><tr><th>Re | |||
| 0003b490:·626f·6f74·3a3c·2f74·683e·3c74·643e·6661··boot:</th><td>fa | |||
| 0003b | 0003b4a0:·6c73·653c·2f74·643e·3c2f·7472·3e3c·7472··lse</td></tr><tr | ||
| 0003b390:·6162·6c65·3e3c·7072·653e·3c63·6f64·653e··able><pre><code> | |||
| 0003b3a0:·2d20·6e61·6d65·3a20·456e·7375·7265·2061··-·name:·Ensure·a | |||
| 0003b3b0:·6964·6520·6973·2069·6e73·7461·6c6c·6564··ide·is·installed | |||
| 0003b3c0:·0a20·2070·6163·6b61·6765·3a0a·2020·2020··.··package:.···· | |||
| 0003b3d0:·6e61·6d65·3a20·6169·6465·0a20·2020·2073··name:·aide.····s | |||
| 0003b3e0:·7461·7465·3a20·7072·6573·656e·740a·2020··tate:·present.·· | |||
| 0003b3f0:·7768·656e·3a20·616e·7369·626c·655f·7669··when:·ansible_vi | |||
| 0003b400:·7274·7561·6c69·7a61·7469·6f6e·5f74·7970··rtualization_typ | |||
| 0003b410:·6520·6e6f·7420·696e·205b·2264·6f63·6b65··e·not·in·["docke | |||
| 0003b420:·7222·2c20·226c·7863·222c·2022·6f70·656e··r",·"lxc",·"open | |||
| 0003b430:·767a·222c·2022·706f·646d·616e·222c·2022··vz",·"podman",·" | |||
| 0003b440:·636f·6e74·6169·6e65·7222·5d0a·2020·7461··container"].··ta | |||
| 0003b450:·6773·3a0a·2020·2d20·4343·452d·3833·3238··gs:.··-·CCE-8328 | |||
| 0003b460:·392d·390a·2020·2d20·434a·4953·2d35·2e31··9-9.··-·CJIS-5.1 | |||
| 0003b470:·302e·312e·330a·2020·2d20·4449·5341·2d53··0.1.3.··-·DISA-S | |||
| 0003b480:·5449·472d·534c·4553·2d31·352d·3031·3034··TIG-SLES-15-0104 | |||
| 0003b490:·3139·0a20·202d·204e·4953·542d·3830·302d··19.··-·NIST-800- | |||
| 0003b4a0:·3533·2d43·4d2d·3628·6129·0a20·202d·2050··53-CM-6(a).··-·P | |||
| 0003b4b0:·4349·2d44·5353·2d52·6571·2d31·312e·350a··CI-DSS-Req-11.5. | |||
| 0003b4c0:·2020·2d20·5043·492d·4453·5376·342d·3131····-·PCI-DSSv4-11 | |||
| 0003b4d0:·2e35·2e32·0a20·202d·2065·6e61·626c·655f··.5.2.··-·enable_ | |||
| 0003b4e0:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0003b4f0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0003b500:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0003b510:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0003b520:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0003b530:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0003b | 0003b4b0:·3e3c·7468·3e53·7472·6174·6567·793a·3c2f··><th>Strategy:</ | ||
| 0003b4c0:·7468·3e3c·7464·3e65·6e61·626c·653c·2f74··th><td>enable</t | |||
| 0003b4d0:·643e·3c2f·7472·3e3c·2f74·6162·6c65·3e3c··d></tr></table>< | |||
| 0003b4e0:·7072·653e·3c63·6f64·653e·2d20·6e61·6d65··pre><code>-·name | |||
| 0003b4f0:·3a20·456e·7375·7265·2061·6964·6520·6973··:·Ensure·aide·is | |||
| 0003b500:·2069·6e73·7461·6c6c·6564·0a20·2070·6163···installed.··pac | |||
| 0003b510:·6b61·6765·3a0a·2020·2020·6e61·6d65·3a20··kage:.····name:· | |||
| 0003b520:·6169·6465·0a20·2020·2073·7461·7465·3a20··aide.····state:· | |||
| 0003b530:·7072·6573·656e·740a·2020·7768·656e·3a20··present.··when:· | |||
| 0003b540:·616e·7369·626c·655f·7669·7274·7561·6c69··ansible_virtuali | |||
| 0003b550:·7a61·7469·6f6e·5f74·7970·6520·6e6f·7420··zation_type·not· | |||
| 0003b560:·696e·205b·2264·6f63·6b65·7222·2c20·226c··in·["docker",·"l | |||
| 0003b570:·7863·222c·2022·6f70·656e·767a·222c·2022··xc",·"openvz",·" | |||
| 0003b580:·706f·646d·616e·222c·2022·636f·6e74·6169··podman",·"contai | |||
| 0003b590:·6e65·7222·5d0a·2020·7461·6773·3a0a·2020··ner"].··tags:.·· | |||
| 0003b5a0:·2d20·4343·452d·3833·3238·392d·390a·2020··-·CCE-83289-9.·· | |||
| 0003b5b0:·2d20·434a·4953·2d35·2e31·302e·312e·330a··-·CJIS-5.10.1.3. | |||
| 0003b5c0:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 0003b5d0:·4553·2d31·352d·3031·3034·3139·0a20·202d··ES-15-010419.··- | |||
| 0003b5e0:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0003b5f0:·3628·6129·0a20·202d·2050·4349·2d44·5353··6(a).··-·PCI-DSS | |||
| Max diff block lines reached; 1280308/1303408 bytes (98.23%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·for·Level·1·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l1 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 122, 14 lines modified | Offset 122, 19 lines modified | ||
| 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 122 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 123 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 124 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 125 | ·············_\x8c_\x8i_\x8s············1.4.1 | 125 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 126 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 127 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 130 | [[packages]] | ||
| 131 | name·=·"aide" | ||
| 132 | version·=·"*" | ||
| 129 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 130 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 131 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 132 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 133 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 134 | -·name:·Ensure·aide·is·installed | 138 | -·name:·Ensure·aide·is·installed |
| 135 | ··package: | 139 | ··package: |
| Offset 145, 44 lines modified | Offset 150, 39 lines modified | ||
| 145 | ··-·PCI-DSSv4-11.5.2 | 150 | ··-·PCI-DSSv4-11.5.2 |
| 146 | ··-·enable_strategy | 151 | ··-·enable_strategy |
| 147 | ··-·low_complexity | 152 | ··-·low_complexity |
| 148 | ··-·low_disruption | 153 | ··-·low_disruption |
| 149 | ··-·medium_severity | 154 | ··-·medium_severity |
| 150 | ··-·no_reboot_needed | 155 | ··-·no_reboot_needed |
| 151 | ··-·package_aide_installed | 156 | ··-·package_aide_installed |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 163 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 164 | [[packages]] | ||
| 165 | name·=·"aide" | ||
| 166 | version·=·"*" | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 157 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 158 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 159 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 160 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 161 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 172 | #·Remediation·is·applicable·only·in·certain·platforms | 162 | #·Remediation·is·applicable·only·in·certain·platforms |
| 173 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 163 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 174 | zypper·install·-y·"aide" | 164 | zypper·install·-y·"aide" |
| 175 | else | 165 | else |
| 176 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 166 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 177 | fi | 167 | fi |
| 168 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 169 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 170 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 171 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 172 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 173 | include·install_aide | ||
| 174 | class·install_aide·{ | ||
| 175 | ··package·{·'aide': | ||
| 176 | ····ensure·=>·'installed', | ||
| 177 | ··} | ||
| 178 | } | ||
| 178 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 179 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 179 | Run·the·following·command·to·generate·a·new·database: | 180 | Run·the·following·command·to·generate·a·new·database: |
| 180 | $·sudo·/usr/bin/aide·--init | 181 | $·sudo·/usr/bin/aide·--init |
| 181 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 182 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 182 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 183 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 183 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 184 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 184 | generated·database·can·be·installed·as·follows: | 185 | generated·database·can·be·installed·as·follows: |
| Offset 724, 26 lines modified | Offset 724, 14 lines modified | ||
| 724 | ··-·NIST-800-53-CM-7(b) | 724 | ··-·NIST-800-53-CM-7(b) |
| 725 | ··-·disable_strategy | 725 | ··-·disable_strategy |
| 726 | ··-·low_complexity | 726 | ··-·low_complexity |
| 727 | ··-·low_disruption | 727 | ··-·low_disruption |
| 728 | ··-·medium_severity | 728 | ··-·medium_severity |
| 729 | ··-·no_reboot_needed | 729 | ··-·no_reboot_needed |
| 730 | ··-·package_gdm_removed | 730 | ··-·package_gdm_removed |
| 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 736 | include·remove_gdm | ||
| 737 | class·remove_gdm·{ | ||
| 738 | ··package·{·'gdm': | ||
| 739 | ····ensure·=>·'purged', | ||
| 740 | ··} | ||
| 741 | } | ||
| 742 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 731 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 743 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 732 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 744 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 733 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 745 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 734 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 746 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 735 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 747 | #·Remediation·is·applicable·only·in·certain·platforms | 736 | #·Remediation·is·applicable·only·in·certain·platforms |
| 748 | if·rpm·--quiet·-q·gdm;·then | 737 | if·rpm·--quiet·-q·gdm;·then |
| Offset 755, 14 lines modified | Offset 743, 26 lines modified | ||
| 755 | #» ···system! | 743 | #» ···system! |
| 756 | zypper·remove·-y·"gdm" | 744 | zypper·remove·-y·"gdm" |
| 757 | else | 745 | else |
| 758 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 746 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 759 | fi | 747 | fi |
| Max diff block lines reached; 139779/145390 bytes (96.14%) of diff not shown. | |||
| Offset 14313, 15 lines modified | Offset 14313, 15 lines modified | ||
| 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037e80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037e90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037ea0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037eb0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037ec0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037ed0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037ee0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037ef0:·206f·6620·3230·323 | 00037ef0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037f10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037f20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037f30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037f40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037f50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037f60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 15162, 168 lines modified | Offset 15162, 168 lines modified | ||
| 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | 0003b390:·6174·612d·7461·7267·6574·3d22·2369·646d··ata-target="#idm | ||
| 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | 0003b3a0:·3633·3332·2220·7461·6269·6e64·6578·3d22··6332"·tabindex=" | ||
| 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 0003b3b0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 0003b3c0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 0003b3d0:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 0003b3e0:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 0003b3f0:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 0003b400:·6469·6174·696f·6e20·4 | 0003b400:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 0003b410:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 0003b420:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b430:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b440:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b450:·2220·6964·3d22·6964·6d36·3333·3222·3e3c··"·id="idm6332">< | |||
| 0003b460:·7072·653e·3c63·6f64·653e·0a5b·5b70·6163··pre><code>.[[pac | |||
| 0003b470:·6b61·6765·735d·5d0a·6e61·6d65·203d·2022··kages]].name·=·" | |||
| 0003b480:·6169·6465·220a·7665·7273·696f·6e20·3d20··aide".version·=· | |||
| 0003b410:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 0003b420:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 0003b430:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 0003b440:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 0003b450:·3333·3222·3e3c·7461·626c·6520·636c·6173··332"><table·clas | |||
| 0003b460:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 0003b470:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 0003b480:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 0003b490:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 0003b4a0:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 0003b4b0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b4c0:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 0003b4d0:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 0003b4e0:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 0003b4f0:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 0003b500:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 0003b510:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 0003b520:·3a3c·2f74·683e·3c74·643e·656e·6162·6c65··:</th><td>enable | |||
| 0003b530:·3c2f·7464·3e3c·2f74·723e·3c2f·7461·626c··</td></tr></tabl | |||
| 0003b540:·653e·3c70·7265·3e3c·636f·6465·3e2d·206e··e><pre><code>-·n | |||
| 0003b550:·616d·653a·2045·6e73·7572·6520·6169·6465··ame:·Ensure·aide | |||
| 0003b560:·2069·7320·696e·7374·616c·6c65·640a·2020···is·installed.·· | |||
| 0003b570:·7061·636b·6167·653a·0a20·2020·206e·616d··package:.····nam | |||
| 0003b580:·653a·2061·6964·650a·2020·2020·7374·6174··e:·aide.····stat | |||
| 0003b590:·653a·2070·7265·7365·6e74·0a20·2077·6865··e:·present.··whe | |||
| 0003b5a0:·6e3a·2061·6e73·6962·6c65·5f76·6972·7475··n:·ansible_virtu | |||
| 0003b5b0:·616c·697a·6174·696f·6e5f·7479·7065·206e··alization_type·n | |||
| 0003b5c0:·6f74·2069·6e20·5b22·646f·636b·6572·222c··ot·in·["docker", | |||
| 0003b5d0:·2022·6c78·6322·2c20·226f·7065·6e76·7a22···"lxc",·"openvz" | |||
| 0003b5e0:·2c20·2270·6f64·6d61·6e22·2c20·2263·6f6e··,·"podman",·"con | |||
| 0003b5f0:·7461·696e·6572·225d·0a20·2074·6167·733a··tainer"].··tags: | |||
| 0003b600:·0a20·202d·2043·4345·2d38·3332·3839·2d39··.··-·CCE-83289-9 | |||
| 0003b610:·0a20·202d·2043·4a49·532d·352e·3130·2e31··.··-·CJIS-5.10.1 | |||
| 0003b620:·2e33·0a20·202d·2044·4953·412d·5354·4947··.3.··-·DISA-STIG | |||
| 0003b630:·2d53·4c45·532d·3135·2d30·3130·3431·390a··-SLES-15-010419. | |||
| 0003b640:·2020·2d20·4e49·5354·2d38·3030·2d35·332d····-·NIST-800-53- | |||
| 0003b650:·434d·2d36·2861·290a·2020·2d20·5043·492d··CM-6(a).··-·PCI- | |||
| 0003b660:·4453·532d·5265·712d·3131·2e35·0a20·202d··DSS-Req-11.5.··- | |||
| 0003b670:·2050·4349·2d44·5353·7634·2d31·312e·352e···PCI-DSSv4-11.5. | |||
| 0003b680:·320a·2020·2d20·656e·6162·6c65·5f73·7472··2.··-·enable_str | |||
| 0003b690:·6174·6567·790a·2020·2d20·6c6f·775f·636f··ategy.··-·low_co | |||
| 0003b6a0:·6d70·6c65·7869·7479·0a20·202d·206c·6f77··mplexity.··-·low | |||
| 0003b6b0:·5f64·6973·7275·7074·696f·6e0a·2020·2d20··_disruption.··-· | |||
| 0003b6c0:·6d65·6469·756d·5f73·6576·6572·6974·790a··medium_severity. | |||
| 0003b6d0:·2020·2d20·6e6f·5f72·6562·6f6f·745f·6e65····-·no_reboot_ne | |||
| 0003b6e0:·6564·6564·0a20·202d·2070·6163·6b61·6765··eded.··-·package | |||
| 0003b6f0:·5f61·6964·655f·696e·7374·616c·6c65·640a··_aide_installed. | |||
| 0003b | 0003b490:·222a·220a·3c2f·636f·6465·3e3c·2f70·7265··"*".</code></pre | ||
| 0003b | 0003b4a0:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | ||
| 0003b | 0003b4b0:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | ||
| 0003b | 0003b4c0:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | ||
| 0003b | 0003b4d0:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | ||
| 0003b75 | 0003b4e0:·7267·6574·3d22·2369·646d·3633·3333·2220··rget="#idm6333"· | ||
| 0003b76 | 0003b4f0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | ||
| 0003b | 0003b500:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | ||
| 0003b780 | 0003b510:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | ||
| 0003b79 | 0003b520:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | ||
| 0003b | 0003b530:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | ||
| 0003b | 0003b540:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | ||
| 0003b7c0:·7070·6574·2073·6e69·7070·6574·20e2·87b2··ppet·snippet·... | |||
| 0003b7d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0003b7e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0003b7f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0003b800:·2269·646d·3633·3333·223e·3c74·6162·6c65··"idm6333"><table | |||
| 0003b810:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0003b820:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0003b830:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0003b840:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0003b | 0003b550:·6e20·416e·7369·626c·6520·736e·6970·7065··n·Ansible·snippe | ||
| 0003b560:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 0003b570:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | |||
| 0003b580:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 0003b590:·2220·6964·3d22·6964·6d36·3333·3322·3e3c··"·id="idm6333">< | |||
| 0003b5a0:·7461·626c·6520·636c·6173·733d·2274·6162··table·class="tab | |||
| 0003b5b0:·6c65·2074·6162·6c65·2d73·7472·6970·6564··le·table-striped | |||
| 0003b5c0:·2074·6162·6c65·2d62·6f72·6465·7265·6420···table-bordered· | |||
| 0003b5d0:·7461·626c·652d·636f·6e64·656e·7365·6422··table-condensed" | |||
| 0003b5e0:·3e3c·7472·3e3c·7468·3e43·6f6d·706c·6578··><tr><th>Complex | |||
| 0003b5f0:·6974·793a·3c2f·7468·3e3c·7464·3e6c·6f77··ity:</th><td>low | |||
| 0003b600:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b610:·683e·4469·7372·7570·7469·6f6e·3a3c·2f74··h>Disruption:</t | |||
| 0003b | 0003b620:·683e·3c74·643e·6c6f·773c·2f74·643e·3c2f··h><td>low</td></ | ||
| 0003b630:·7472·3e3c·7472·3e3c·7468·3e52·6562·6f6f··tr><tr><th>Reboo | |||
| 0003b640:·743a·3c2f·7468·3e3c·7464·3e66·616c·7365··t:</th><td>false | |||
| 0003b650:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b660:·683e·5374·7261·7465·6779·3a3c·2f74·683e··h>Strategy:</th> | |||
| 0003b670:·3c74·643e·656e·6162·6c65·3c2f·7464·3e3c··<td>enable</td>< | |||
| 0003b680:·2f74·723e·3c2f·7461·626c·653e·3c70·7265··/tr></table><pre | |||
| 0003b690:·3e3c·636f·6465·3e2d·206e·616d·653a·2045··><code>-·name:·E | |||
| 0003b6a0:·6e73·7572·6520·6169·6465·2069·7320·696e··nsure·aide·is·in | |||
| 0003b6b0:·7374·616c·6c65·640a·2020·7061·636b·6167··stalled.··packag | |||
| 0003b6c0:·653a·0a20·2020·206e·616d·653a·2061·6964··e:.····name:·aid | |||
| 0003b6d0:·650a·2020·2020·7374·6174·653a·2070·7265··e.····state:·pre | |||
| 0003b6e0:·7365·6e74·0a20·2077·6865·6e3a·2061·6e73··sent.··when:·ans | |||
| 0003b6f0:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| Max diff block lines reached; 1602280/1625242 bytes (98.59%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·CIS·SUSE·Linux·Enterprise·15·Benchmark·Level·2·-·Workstation |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_cis_workstation_l2 |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 54 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 55 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 56 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 126, 14 lines modified | Offset 126, 19 lines modified | ||
| 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 126 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 127 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 128 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 129 | ·············_\x8c_\x8i_\x8s············1.4.1 | 129 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 130 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 131 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 132 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 134 | [[packages]] | ||
| 135 | name·=·"aide" | ||
| 136 | version·=·"*" | ||
| 133 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 137 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 134 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 138 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 135 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 139 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 136 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 140 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 137 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 141 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 138 | -·name:·Ensure·aide·is·installed | 142 | -·name:·Ensure·aide·is·installed |
| 139 | ··package: | 143 | ··package: |
| Offset 149, 44 lines modified | Offset 154, 39 lines modified | ||
| 149 | ··-·PCI-DSSv4-11.5.2 | 154 | ··-·PCI-DSSv4-11.5.2 |
| 150 | ··-·enable_strategy | 155 | ··-·enable_strategy |
| 151 | ··-·low_complexity | 156 | ··-·low_complexity |
| 152 | ··-·low_disruption | 157 | ··-·low_disruption |
| 153 | ··-·medium_severity | 158 | ··-·medium_severity |
| 154 | ··-·no_reboot_needed | 159 | ··-·no_reboot_needed |
| 155 | ··-·package_aide_installed | 160 | ··-·package_aide_installed |
| 156 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 157 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 158 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 159 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 160 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 161 | include·install_aide | ||
| 162 | class·install_aide·{ | ||
| 163 | ··package·{·'aide': | ||
| 164 | ····ensure·=>·'installed', | ||
| 165 | ··} | ||
| 166 | } | ||
| 167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 168 | [[packages]] | ||
| 169 | name·=·"aide" | ||
| 170 | version·=·"*" | ||
| 171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 161 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 162 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 163 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 164 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 165 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 176 | #·Remediation·is·applicable·only·in·certain·platforms | 166 | #·Remediation·is·applicable·only·in·certain·platforms |
| 177 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 167 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 178 | zypper·install·-y·"aide" | 168 | zypper·install·-y·"aide" |
| 179 | else | 169 | else |
| 180 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 170 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 181 | fi | 171 | fi |
| 172 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 173 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 174 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 175 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 176 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 177 | include·install_aide | ||
| 178 | class·install_aide·{ | ||
| 179 | ··package·{·'aide': | ||
| 180 | ····ensure·=>·'installed', | ||
| 181 | ··} | ||
| 182 | } | ||
| 182 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 183 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 183 | Run·the·following·command·to·generate·a·new·database: | 184 | Run·the·following·command·to·generate·a·new·database: |
| 184 | $·sudo·/usr/bin/aide·--init | 185 | $·sudo·/usr/bin/aide·--init |
| 185 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 186 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 186 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 187 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 187 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 188 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 188 | generated·database·can·be·installed·as·follows: | 189 | generated·database·can·be·installed·as·follows: |
| Offset 835, 26 lines modified | Offset 835, 14 lines modified | ||
| 835 | ··-·NIST-800-53-CM-7(b) | 835 | ··-·NIST-800-53-CM-7(b) |
| 836 | ··-·disable_strategy | 836 | ··-·disable_strategy |
| 837 | ··-·low_complexity | 837 | ··-·low_complexity |
| 838 | ··-·low_disruption | 838 | ··-·low_disruption |
| 839 | ··-·medium_severity | 839 | ··-·medium_severity |
| 840 | ··-·no_reboot_needed | 840 | ··-·no_reboot_needed |
| 841 | ··-·package_gdm_removed | 841 | ··-·package_gdm_removed |
| 842 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 843 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 844 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 845 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 846 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | ||
| 847 | include·remove_gdm | ||
| 848 | class·remove_gdm·{ | ||
| 849 | ··package·{·'gdm': | ||
| 850 | ····ensure·=>·'purged', | ||
| 851 | ··} | ||
| 852 | } | ||
| 853 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 842 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 854 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 843 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 855 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 844 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 856 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 845 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 857 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 846 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 858 | #·Remediation·is·applicable·only·in·certain·platforms | 847 | #·Remediation·is·applicable·only·in·certain·platforms |
| 859 | if·rpm·--quiet·-q·gdm;·then | 848 | if·rpm·--quiet·-q·gdm;·then |
| Offset 866, 14 lines modified | Offset 854, 26 lines modified | ||
| 866 | #» ···system! | 854 | #» ···system! |
| 867 | zypper·remove·-y·"gdm" | 855 | zypper·remove·-y·"gdm" |
| 868 | else | 856 | else |
| 869 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 857 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 870 | fi | 858 | fi |
| Max diff block lines reached; 165447/171054 bytes (96.72%) of diff not shown. | |||
| Offset 14324, 16 lines modified | Offset 14324, 16 lines modified | ||
| 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | 00037f30:·6f6e·2048·6973·746f·7279·3c2f·6832·3e3c··on·History</h2>< | ||
| 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | 00037f40:·703e·4375·7272·656e·7420·7665·7273·696f··p>Current·versio | ||
| 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | 00037f50:·6e3a·203c·7374·726f·6e67·3e30·2e31·2e37··n:·<strong>0.1.7 | ||
| 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | 00037f60:·343c·2f73·7472·6f6e·673e·3c2f·703e·3c75··4</strong></p><u | ||
| 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | 00037f70:·6c3e·3c6c·693e·3c73·7472·6f6e·673e·6472··l><li><strong>dr | ||
| 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | 00037f80:·6166·743c·2f73·7472·6f6e·673e·0a20·2020··aft</strong>.··· | ||
| 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037f90:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037fa0:·2028·6173·206f·6620·3230·323 | 00037fa0:·2028·6173·206f·6620·3230·3235·2d30·312d···(as·of·2025-01- | ||
| 00037fb0:·323 | 00037fb0:·3233·290a·2020·2020·2020·2020·2020·2020··23).············ | ||
| 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | 00037fc0:·2020·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f······</li></ul></ | ||
| 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | 00037fd0:·6469·763e·3c68·323e·5461·626c·6520·6f66··div><h2>Table·of | ||
| 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | 00037fe0:·2043·6f6e·7465·6e74·733c·2f68·323e·3c6f···Contents</h2><o | ||
| 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | 00037ff0:·6c3e·3c6c·693e·3c61·2068·7265·663d·2223··l><li><a·href="# | ||
| 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | 00038000:·7863·6364·665f·6f72·672e·7373·6770·726f··xccdf_org.ssgpro | ||
| 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | 00038010:·6a65·6374·2e63·6f6e·7465·6e74·5f67·726f··ject.content_gro | ||
| 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | 00038020:·7570·5f73·7973·7465·6d22·3e53·7973·7465··up_system">Syste | ||
| Offset 21888, 324 lines modified | Offset 21888, 324 lines modified | ||
| 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | 000557f0:·612d·7461·7267·6574·3d22·2369·646d·3131··a-target="#idm11 | ||
| 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | 00055800:·3338·3822·2074·6162·696e·6465·783d·2230··388"·tabindex="0 | ||
| 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | 00055810:·2220·726f·6c65·3d22·6275·7474·6f6e·2220··"·role="button"· | ||
| 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | 00055820:·6172·6961·2d65·7870·616e·6465·643d·2266··aria-expanded="f | ||
| 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | 00055830:·616c·7365·2220·7469·746c·653d·2241·6374··alse"·title="Act | ||
| 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | 00055840:·6976·6174·6520·746f·2072·6576·6561·6c22··ivate·to·reveal" | ||
| 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | 00055850:·2068·7265·663d·2223·2122·3e52·656d·6564···href="#!">Remed | ||
| 00055860:·6961·7469·6f6e·204 | 00055860:·6961·7469·6f6e·204f·5342·7569·6c64·2042··iation·OSBuild·B | ||
| 00055870:·6c75·6570·7269·6e74·2073·6e69·7070·6574··lueprint·snippet | |||
| 00055880:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00055890:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 000558a0:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 000558b0:·2069·643d·2269·646d·3131·3338·3822·3e3c···id="idm11388">< | |||
| 000558c0:·7072·653e·3c63·6f64·653e·0a5b·6375·7374··pre><code>.[cust | |||
| 000558d0:·6f6d·697a·6174·696f·6e73·2e73·6572·7669··omizations.servi | |||
| 000558e0:·6365·735d·0a6d·6173·6b65·6420·3d20·5b22··ces].masked·=·[" | |||
| 000558f0:·6465·6275·672d·7368·656c·6c22·5d0a·3c2f··debug-shell"].</ | |||
| 00055900:·636f·6465·3e3c·2f70·7265·3e3c·2f64·6976··code></pre></div | |||
| 00055910:·3e3c·6120·636c·6173·733d·2262·746e·2062··><a·class="btn·b | |||
| 00055920:·746e·2d73·7563·6365·7373·2220·6461·7461··tn-success"·data | |||
| 00055930:·2d74·6f67·676c·653d·2263·6f6c·6c61·7073··-toggle="collaps | |||
| 00055940:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | |||
| 00055950:·2369·646d·3131·3338·3922·2074·6162·696e··#idm11389"·tabin | |||
| 00055960:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | |||
| 00055970:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | |||
| 00055980:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | |||
| 00055990:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | |||
| 000559a0:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | |||
| 000559b0:·3e52·656d·6564·6961·7469·6f6e·2041·6e73··>Remediation·Ans | |||
| 000559c0:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 000559d0:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 000559e0:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 000559f0:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 00055a00:·2269·646d·3131·3338·3922·3e3c·7461·626c··"idm11389"><tabl | |||
| 00055a10:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 00055a20:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00055a30:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00055a40:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00055a50:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00055a60:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00055a70:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00055a80:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00055a90:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00055aa0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00055ab0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00055ac0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00055ad0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00055ae0:·6469·7361·626c·653c·2f74·643e·3c2f·7472··disable</td></tr | |||
| 00055af0:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 00055870:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 00055880:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 00055890:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 000558a0:·6c61·7073·6522·2069·643d·2269·646d·3131··lapse"·id="idm11 | |||
| 000558b0:·3338·3822·3e3c·7461·626c·6520·636c·6173··388"><table·clas | |||
| 000558c0:·733d·2274·6162·6c65·2074·6162·6c65·2d73··s="table·table-s | |||
| 000558d0:·7472·6970·6564·2074·6162·6c65·2d62·6f72··triped·table-bor | |||
| 000558e0:·6465·7265·6420·7461·626c·652d·636f·6e64··dered·table-cond | |||
| 000558f0:·656e·7365·6422·3e3c·7472·3e3c·7468·3e43··ensed"><tr><th>C | |||
| 00055900:·6f6d·706c·6578·6974·793a·3c2f·7468·3e3c··omplexity:</th>< | |||
| 00055910:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 00055920:·3c74·723e·3c74·683e·4469·7372·7570·7469··<tr><th>Disrupti | |||
| 00055930:·6f6e·3a3c·2f74·683e·3c74·643e·6c6f·773c··on:</th><td>low< | |||
| 00055940:·2f74·643e·3c2f·7472·3e3c·7472·3e3c·7468··/td></tr><tr><th | |||
| 00055950:·3e52·6562·6f6f·743a·3c2f·7468·3e3c·7464··>Reboot:</th><td | |||
| 00055960:·3e66·616c·7365·3c2f·7464·3e3c·2f74·723e··>false</td></tr> | |||
| 00055970:·3c74·723e·3c74·683e·5374·7261·7465·6779··<tr><th>Strategy | |||
| 00055980:·3a3c·2f74·683e·3c74·643e·6469·7361·626c··:</th><td>disabl | |||
| 00055990:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 000559a0:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 000559b0:·6e61·6d65·3a20·4469·7361·626c·6520·6465··name:·Disable·de | |||
| 000559c0:·6275·672d·7368·656c·6c20·5379·7374·656d··bug-shell·System | |||
| 000559d0:·4420·5365·7276·6963·6520·2d20·436f·6c6c··D·Service·-·Coll | |||
| 000559e0:·6563·7420·7379·7374·656d·6420·5365·7276··ect·systemd·Serv | |||
| 000559f0:·6963·6573·2050·7265·7365·6e74·2069·6e0a··ices·Present·in. | |||
| 00055a00:·2020·2020·7468·6520·5379·7374·656d·0a20······the·System.· | |||
| 00055a10:·2061·6e73·6962·6c65·2e62·7569·6c74·696e···ansible.builtin | |||
| 00055a20:·2e63·6f6d·6d61·6e64·3a20·7379·7374·656d··.command:·system | |||
| 00055a30:·6374·6c20·2d71·206c·6973·742d·756e·6974··ctl·-q·list-unit | |||
| 00055a40:·2d66·696c·6573·202d·2d74·7970·6520·7365··-files·--type·se | |||
| 00055a50:·7276·6963·650a·2020·7265·6769·7374·6572··rvice.··register | |||
| 00055a60:·3a20·7365·7276·6963·655f·6578·6973·7473··:·service_exists | |||
| 00055a70:·0a20·2063·6861·6e67·6564·5f77·6865·6e3a··.··changed_when: | |||
| 00055a80:·2066·616c·7365·0a20·2066·6169·6c65·645f···false.··failed_ | |||
| 00055a90:·7768·656e·3a20·7365·7276·6963·655f·6578··when:·service_ex | |||
| 00055aa0:·6973·7473·2e72·6320·6e6f·7420·696e·205b··ists.rc·not·in·[ | |||
| 00055ab0:·302c·2031·5d0a·2020·6368·6563·6b5f·6d6f··0,·1].··check_mo | |||
| 00055ac0:·6465·3a20·6661·6c73·650a·2020·7768·656e··de:·false.··when | |||
| 00055ad0:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 00055ae0:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00055af0:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00055b00:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00055b10:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00055b20:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00055b30:·2020·2d20·4343·452d·3931·3432·312d·380a····-·CCE-91421-8. | |||
| 00055b40:·2020·2d20·4e49·5354·2d38·3030·2d31·3731····-·NIST-800-171 | |||
| 00055b50:·2d33·2e34·2e35·0a20·202d·204e·4953·542d··-3.4.5.··-·NIST- | |||
| 00055b60:·3830·302d·3533·2d43·4d2d·360a·2020·2d20··800-53-CM-6.··-· | |||
| 00055b70:·6469·7361·626c·655f·7374·7261·7465·6779··disable_strategy | |||
| 00055b80:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 00055b90:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 00055ba0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 00055bb0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 00055bc0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 00055bd0:·2020·2d20·7365·7276·6963·655f·6465·6275····-·service_debu | |||
| 00055be0:·672d·7368·656c·6c5f·6469·7361·626c·6564··g-shell_disabled | |||
| 00055b | 00055b00:·6f64·653e·2d20·6e61·6d65·3a20·4469·7361··ode>-·name:·Disa | ||
| 00055 | 00055b10:·626c·6520·6465·6275·672d·7368·656c·6c20··ble·debug-shell· | ||
| 00055 | 00055b20:·5379·7374·656d·4420·5365·7276·6963·6520··SystemD·Service· | ||
| 00055c20:·456e·7375·7265·2064·6562·7567·2d73·6865··Ensure·debug-she | |||
| 00055 | 00055b30:·2d20·436f·6c6c·6563·7420·7379·7374·656d··-·Collect·system | ||
| Max diff block lines reached; 570056/614684 bytes (92.74%) of diff not shown. | |||
| Offset 45, 15 lines modified | Offset 45, 15 lines modified | ||
| 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) | 45 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Health·Insurance·Portability·and·Accountability·Act·(HIPAA) |
| 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa | 46 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_hipaa |
| 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 47 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 48 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 49 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 51 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 52 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 53 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 54 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 55 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 56 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 57 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 58 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 59 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 1638, 14 lines modified | Offset 1638, 18 lines modified | ||
| 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 | 1638 | ·············_\x8d_\x8i_\x8s_\x8a···CCI-000366 |
| 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) | 1639 | ····················164.308(a)(1)(ii)(B),·164.308(a)(7)(i),·164.308(a)(7)(ii)(A),·164.310(a)(1),·164.310(a) |
| 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), | 1640 | References:··_\x8h_\x8i_\x8p_\x8a_\x8a··(2)(i),·164.310(a)(2)(ii),·164.310(a)(2)(iii),·164.310(b),·164.310(c),·164.310(d)(1), |
| 1641 | ····················164.310(d)(2)(iii) | 1641 | ····················164.310(d)(2)(iii) |
| 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 | 1642 | ·············_\x8n_\x8i_\x8s_\x8t···CM-6 |
| 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 | 1643 | ·············_\x8o_\x8s_\x8p_\x8p···FIA_UAU.1 |
| 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 | 1644 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·SRG-OS-000324-GPOS-00125,·SRG-OS-000480-GPOS-00227 |
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1646 | [customizations.services] | ||
| 1647 | masked·=·["debug-shell"] | ||
| 1645 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1648 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1646 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1649 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1647 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1650 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1648 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1651 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1649 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1652 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1650 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in | 1653 | -·name:·Disable·debug-shell·SystemD·Service·-·Collect·systemd·Services·Present·in |
| 1651 | ····the·System | 1654 | ····the·System |
| Offset 1719, 31 lines modified | Offset 1723, 14 lines modified | ||
| 1719 | ··-·NIST-800-53-CM-6 | 1723 | ··-·NIST-800-53-CM-6 |
| 1720 | ··-·disable_strategy | 1724 | ··-·disable_strategy |
| 1721 | ··-·low_complexity | 1725 | ··-·low_complexity |
| 1722 | ··-·low_disruption | 1726 | ··-·low_disruption |
| 1723 | ··-·medium_severity | 1727 | ··-·medium_severity |
| 1724 | ··-·no_reboot_needed | 1728 | ··-·no_reboot_needed |
| 1725 | ··-·service_debug-shell_disabled | 1729 | ··-·service_debug-shell_disabled |
| 1726 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1727 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1728 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1729 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1730 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1731 | include·disable_debug-shell | ||
| 1732 | class·disable_debug-shell·{ | ||
| 1733 | ··service·{'debug-shell': | ||
| 1734 | ····enable·=>·false, | ||
| 1735 | ····ensure·=>·'stopped', | ||
| 1736 | ··} | ||
| 1737 | } | ||
| 1738 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1739 | [customizations.services] | ||
| 1740 | masked·=·["debug-shell"] | ||
| 1741 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 1730 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 1742 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1731 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1743 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1732 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1744 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1733 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1745 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1734 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1746 | #·Remediation·is·applicable·only·in·certain·platforms | 1735 | #·Remediation·is·applicable·only·in·certain·platforms |
| 1747 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 1736 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| Offset 1761, 14 lines modified | Offset 1748, 27 lines modified | ||
| 1761 | #·so·let's·reset·the·state·so·OVAL·checks·pass. | 1748 | #·so·let's·reset·the·state·so·OVAL·checks·pass. |
| 1762 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. | 1749 | #·Service·should·be·'inactive',·not·'failed'·after·reboot·though. |
| 1763 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true | 1750 | "$SYSTEMCTL_EXEC"·reset-failed·'debug-shell.service'·||·true |
| 1764 | else | 1751 | else |
| 1765 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 1752 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 1766 | fi | 1753 | fi |
| 1754 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1755 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 1756 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 1757 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 1758 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 1759 | include·disable_debug-shell | ||
| 1760 | class·disable_debug-shell·{ | ||
| 1761 | ··service·{'debug-shell': | ||
| 1762 | ····enable·=>·false, | ||
| 1763 | ····ensure·=>·'stopped', | ||
| 1764 | ··} | ||
| 1765 | } | ||
| 1767 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1766 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·C\x8Ct\x8tr\x8rl\x8l-\x8-A\x8Al\x8lt\x8t-\x8-D\x8De\x8el\x8l·B\x8Bu\x8ur\x8rs\x8st\x8t·A\x8Ac\x8ct\x8ti\x8io\x8on\x8n·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1768 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more | 1767 | By·default,·SystemD·will·reboot·the·system·if·the·Ctrl-Alt-Del·key·sequence·is·pressed·Ctrl-Alt-Delete·more |
| 1769 | than·7·times·in·2·seconds. | 1768 | than·7·times·in·2·seconds. |
| 1770 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/ | 1769 | To·configure·the·system·to·ignore·the·CtrlAltDelBurstAction·setting,·add·or·modify·the·following·to·/etc/ |
| 1771 | systemd/system.conf: | 1770 | systemd/system.conf: |
| 1772 | CtrlAltDelBurstAction=none | 1771 | CtrlAltDelBurstAction=none |
| Offset 3213, 14 lines modified | Offset 3213, 18 lines modified | ||
| 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 | 3213 | ····························A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6,·A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 3214 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 3215 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 | 3216 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG-OS-000480-GPOS-00227 |
| 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 | 3217 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010240 |
| 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 | 3218 | ·············_\x8c_\x8i_\x8s············1.1.23 |
| 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule | 3219 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-234823r854187_rule |
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3221 | [customizations.services] | ||
| 3222 | masked·=·["autofs"] | ||
| 3220 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3223 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3221 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3224 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3222 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3225 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3223 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3226 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3224 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 3227 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 3225 | -·name:·Gather·the·package·facts | 3228 | -·name:·Gather·the·package·facts |
| 3226 | ··package_facts: | 3229 | ··package_facts: |
| Offset 3331, 31 lines modified | Offset 3335, 14 lines modified | ||
| 3331 | ··-·NIST-800-53-MP-7 | 3335 | ··-·NIST-800-53-MP-7 |
| 3332 | ··-·disable_strategy | 3336 | ··-·disable_strategy |
| 3333 | ··-·low_complexity | 3337 | ··-·low_complexity |
| 3334 | ··-·low_disruption | 3338 | ··-·low_disruption |
| 3335 | ··-·medium_severity | 3339 | ··-·medium_severity |
| 3336 | ··-·no_reboot_needed | 3340 | ··-·no_reboot_needed |
| 3337 | ··-·service_autofs_disabled | 3341 | ··-·service_autofs_disabled |
| 3338 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3339 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3340 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3341 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3342 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3343 | include·disable_autofs | ||
| Max diff block lines reached; 51936/58112 bytes (89.37%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | 00037d80:·6973·746f·7279·3c2f·6832·3e3c·703e·4375··istory</h2><p>Cu | ||
| 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | 00037d90:·7272·656e·7420·7665·7273·696f·6e3a·203c··rrent·version:·< | ||
| 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | 00037da0:·7374·726f·6e67·3e30·2e31·2e37·343c·2f73··strong>0.1.74</s | ||
| 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | 00037db0:·7472·6f6e·673e·3c2f·703e·3c75·6c3e·3c6c··trong></p><ul><l | ||
| 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | 00037dc0:·693e·3c73·7472·6f6e·673e·6472·6166·743c··i><strong>draft< | ||
| 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | 00037dd0:·2f73·7472·6f6e·673e·0a20·2020·2020·2020··/strong>.······· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | 00037de0:·2020·2020·2020·2020·2020·2020·2028·6173···············(as | ||
| 00037df0:·206f·6620·3230·323 | 00037df0:·206f·6620·3230·3235·2d30·312d·3233·290a···of·2025-01-23). | ||
| 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | 00037e00:·2020·2020·2020·2020·2020·2020·2020·2020·················· | ||
| 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | 00037e10:·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469·763e··</li></ul></div> | ||
| 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | 00037e20:·3c68·323e·5461·626c·6520·6f66·2043·6f6e··<h2>Table·of·Con | ||
| 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | 00037e30:·7465·6e74·733c·2f68·323e·3c6f·6c3e·3c6c··tents</h2><ol><l | ||
| 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | 00037e40:·693e·3c61·2068·7265·663d·2223·7863·6364··i><a·href="#xccd | ||
| 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | 00037e50:·665f·6f72·672e·7373·6770·726f·6a65·6374··f_org.ssgproject | ||
| 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | 00037e60:·2e63·6f6e·7465·6e74·5f67·726f·7570·5f73··.content_group_s | ||
| Offset 16959, 168 lines modified | Offset 16959, 168 lines modified | ||
| 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 000423e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | 000423f0:·2369·646d·3633·3332·2220·7461·6269·6e64··#idm6332"·tabind | ||
| 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | 00042400:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | ||
| 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | 00042410:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | ||
| 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | 00042420:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | ||
| 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | 00042430:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | ||
| 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | 00042440:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | ||
| 00042450:·5265·6d65·6469·6174·696f·6e20·4 | 00042450:·5265·6d65·6469·6174·696f·6e20·4f53·4275··Remediation·OSBu | ||
| 00042460:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 00042470:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 00042480:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 00042490:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 000424a0:·6964·6d36·3333·3222·3e3c·7461·626c·6520··idm6332"><table· | |||
| 000424b0:·636c·6173·733d·2274·6162·6c65·2074·6162··class="table·tab | |||
| 000424c0:·6c65·2d73·7472·6970·6564·2074·6162·6c65··le-striped·table | |||
| 000424d0:·2d62·6f72·6465·7265·6420·7461·626c·652d··-bordered·table- | |||
| 000424e0:·636f·6e64·656e·7365·6422·3e3c·7472·3e3c··condensed"><tr>< | |||
| 000424f0:·7468·3e43·6f6d·706c·6578·6974·793a·3c2f··th>Complexity:</ | |||
| 00042500:·7468·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c··th><td>low</td>< | |||
| 00042510:·2f74·723e·3c74·723e·3c74·683e·4469·7372··/tr><tr><th>Disr | |||
| 00042520:·7570·7469·6f6e·3a3c·2f74·683e·3c74·643e··uption:</th><td> | |||
| 00042530:·6c6f·773c·2f74·643e·3c2f·7472·3e3c·7472··low</td></tr><tr | |||
| 00042540:·3e3c·7468·3e52·6562·6f6f·743a·3c2f·7468··><th>Reboot:</th | |||
| 00042550:·3e3c·7464·3e66·616c·7365·3c2f·7464·3e3c··><td>false</td>< | |||
| 00042560:·2f74·723e·3c74·723e·3c74·683e·5374·7261··/tr><tr><th>Stra | |||
| 00042 | 00042460:·696c·6420·426c·7565·7072·696e·7420·736e··ild·Blueprint·sn | ||
| 00042470:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 00042480:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 00042490:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000424a0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 000424b0:·3222·3e3c·7072·653e·3c63·6f64·653e·0a5b··2"><pre><code>.[ | |||
| 000424c0:·5b70·6163·6b61·6765·735d·5d0a·6e61·6d65··[packages]].name | |||
| 000424d0:·203d·2022·6169·6465·220a·7665·7273·696f···=·"aide".versio | |||
| 000424e0:·6e20·3d20·222a·220a·3c2f·636f·6465·3e3c··n·=·"*".</code>< | |||
| 000424f0:·2f70·7265·3e3c·2f64·6976·3e3c·6120·636c··/pre></div><a·cl | |||
| 00042500:·6173·733d·2262·746e·2062·746e·2d73·7563··ass="btn·btn-suc | |||
| 00042510:·6365·7373·2220·6461·7461·2d74·6f67·676c··cess"·data-toggl | |||
| 00042520:·653d·2263·6f6c·6c61·7073·6522·2064·6174··e="collapse"·dat | |||
| 00042530:·612d·7461·7267·6574·3d22·2369·646d·3633··a-target="#idm63 | |||
| 00042540:·3333·2220·7461·6269·6e64·6578·3d22·3022··33"·tabindex="0" | |||
| 00042550:·2072·6f6c·653d·2262·7574·746f·6e22·2061···role="button"·a | |||
| 00042560:·7269·612d·6578·7061·6e64·6564·3d22·6661··ria-expanded="fa | |||
| 00042570:·6c73·6522·2074·6974·6c65·3d22·4163·7469··lse"·title="Acti | |||
| 00042580:·7661·7465·2074·6f20·7265·7665·616c·2220··vate·to·reveal"· | |||
| 00042590:·6872·6566·3d22·2321·223e·5265·6d65·6469··href="#!">Remedi | |||
| 000425a0:·6174·696f·6e20·416e·7369·626c·6520·736e··ation·Ansible·sn | |||
| 000425b0:·6970·7065·7420·e287·b23c·2f61·3e3c·6272··ippet·...</a><br | |||
| 000425c0:·3e3c·6469·7620·636c·6173·733d·2270·616e··><div·class="pan | |||
| 000425d0:·656c·2d63·6f6c·6c61·7073·6520·636f·6c6c··el-collapse·coll | |||
| 000425e0:·6170·7365·2220·6964·3d22·6964·6d36·3333··apse"·id="idm633 | |||
| 000425f0:·3322·3e3c·7461·626c·6520·636c·6173·733d··3"><table·class= | |||
| 00042600:·2274·6162·6c65·2074·6162·6c65·2d73·7472··"table·table-str | |||
| 00042610:·6970·6564·2074·6162·6c65·2d62·6f72·6465··iped·table-borde | |||
| 00042620:·7265·6420·7461·626c·652d·636f·6e64·656e··red·table-conden | |||
| 00042630:·7365·6422·3e3c·7472·3e3c·7468·3e43·6f6d··sed"><tr><th>Com | |||
| 00042640:·706c·6578·6974·793a·3c2f·7468·3e3c·7464··plexity:</th><td | |||
| 00042 | 00042650:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | ||
| 00042660:·723e·3c74·683e·4469·7372·7570·7469·6f6e··r><th>Disruption | |||
| 00042590:·7461·626c·653e·3c70·7265·3e3c·636f·6465··table><pre><code | |||
| 000425a0:·3e2d·206e·616d·653a·2045·6e73·7572·6520··>-·name:·Ensure· | |||
| 000425b0:·6169·6465·2069·7320·696e·7374·616c·6c65··aide·is·installe | |||
| 000425c0:·640a·2020·7061·636b·6167·653a·0a20·2020··d.··package:.··· | |||
| 000425d0:·206e·616d·653a·2061·6964·650a·2020·2020···name:·aide.···· | |||
| 000425e0:·7374·6174·653a·2070·7265·7365·6e74·0a20··state:·present.· | |||
| 000425f0:·2077·6865·6e3a·2061·6e73·6962·6c65·5f76···when:·ansible_v | |||
| 00042600:·6972·7475·616c·697a·6174·696f·6e5f·7479··irtualization_ty | |||
| 00042610:·7065·206e·6f74·2069·6e20·5b22·646f·636b··pe·not·in·["dock | |||
| 00042620:·6572·222c·2022·6c78·6322·2c20·226f·7065··er",·"lxc",·"ope | |||
| 00042630:·6e76·7a22·2c20·2270·6f64·6d61·6e22·2c20··nvz",·"podman",· | |||
| 00042640:·2263·6f6e·7461·696e·6572·225d·0a20·2074··"container"].··t | |||
| 00042650:·6167·733a·0a20·202d·2043·4345·2d38·3332··ags:.··-·CCE-832 | |||
| 00042660:·3839·2d39·0a20·202d·2043·4a49·532d·352e··89-9.··-·CJIS-5. | |||
| 00042670:·3130·2e31·2e33·0a20·202d·2044·4953·412d··10.1.3.··-·DISA- | |||
| 00042680:·5354·4947·2d53·4c45·532d·3135·2d30·3130··STIG-SLES-15-010 | |||
| 00042690:·3431·390a·2020·2d20·4e49·5354·2d38·3030··419.··-·NIST-800 | |||
| 000426a0:·2d35·332d·434d·2d36·2861·290a·2020·2d20··-53-CM-6(a).··-· | |||
| 000426b0:·5043·492d·4453·532d·5265·712d·3131·2e35··PCI-DSS-Req-11.5 | |||
| 000426c0:·0a20·202d·2050·4349·2d44·5353·7634·2d31··.··-·PCI-DSSv4-1 | |||
| 000426d0:·312e·352e·320a·2020·2d20·656e·6162·6c65··1.5.2.··-·enable | |||
| 000426e0:·5f73·7472·6174·6567·790a·2020·2d20·6c6f··_strategy.··-·lo | |||
| 000426f0:·775f·636f·6d70·6c65·7869·7479·0a20·202d··w_complexity.··- | |||
| 00042700:·206c·6f77·5f64·6973·7275·7074·696f·6e0a···low_disruption. | |||
| 00042710:·2020·2d20·6d65·6469·756d·5f73·6576·6572····-·medium_sever | |||
| 00042720:·6974·790a·2020·2d20·6e6f·5f72·6562·6f6f··ity.··-·no_reboo | |||
| 00042730:·745f·6e65·6564·6564·0a20·202d·2070·6163··t_needed.··-·pac | |||
| 00042740:·6b61·6765·5f61·6964·655f·696e·7374·616c··kage_aide_instal | |||
| 00042750:·6c65·640a·3c2f·636f·6465·3e3c·2f70·7265··led.</code></pre | |||
| 00042760:·3e3c·2f64·6976·3e3c·6120·636c·6173·733d··></div><a·class= | |||
| 00042770:·2262·746e·2062·746e·2d73·7563·6365·7373··"btn·btn-success | |||
| 00042780:·2220·6461·7461·2d74·6f67·676c·653d·2263··"·data-toggle="c | |||
| 00042790:·6f6c·6c61·7073·6522·2064·6174·612d·7461··ollapse"·data-ta | |||
| 000427a0:·7267·6574·3d22·2369·646d·3633·3333·2220··rget="#idm6333"· | |||
| 000427b0:·7461·6269·6e64·6578·3d22·3022·2072·6f6c··tabindex="0"·rol | |||
| 000427c0:·653d·2262·7574·746f·6e22·2061·7269·612d··e="button"·aria- | |||
| 000427d0:·6578·7061·6e64·6564·3d22·6661·6c73·6522··expanded="false" | |||
| 000427e0:·2074·6974·6c65·3d22·4163·7469·7661·7465···title="Activate | |||
| 000427f0:·2074·6f20·7265·7665·616c·2220·6872·6566···to·reveal"·href | |||
| 00042800:·3d22·2321·223e·5265·6d65·6469·6174·696f··="#!">Remediatio | |||
| 00042810:·6e20·5075·7070·6574·2073·6e69·7070·6574··n·Puppet·snippet | |||
| 00042820:·20e2·87b2·3c2f·613e·3c62·723e·3c64·6976···...</a><br><div | |||
| 00042830:·2063·6c61·7373·3d22·7061·6e65·6c2d·636f···class="panel-co | |||
| 00042840:·6c6c·6170·7365·2063·6f6c·6c61·7073·6522··llapse·collapse" | |||
| 00042850:·2069·643d·2269·646d·3633·3333·223e·3c74···id="idm6333"><t | |||
| 00042860:·6162·6c65·2063·6c61·7373·3d22·7461·626c··able·class="tabl | |||
| 00042870:·6520·7461·626c·652d·7374·7269·7065·6420··e·table-striped· | |||
| 00042880:·7461·626c·652d·626f·7264·6572·6564·2074··table-bordered·t | |||
| 00042890:·6162·6c65·2d63·6f6e·6465·6e73·6564·223e··able-condensed"> | |||
| 000428a0:·3c74·723e·3c74·683e·436f·6d70·6c65·7869··<tr><th>Complexi | |||
| 00042 | 00042670:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | ||
| 00042 | 00042680:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e52··d></tr><tr><th>R | ||
| 000428d0:·3e44·6973·7275·7074·696f·6e3a·3c2f·7468··>Disruption:</th | |||
| Max diff block lines reached; 680950/703912 bytes (96.74%) of diff not shown. | |||
| Offset 37, 15 lines modified | Offset 37, 15 lines modified | ||
| 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 | 37 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·PCI-DSS·v4·Control·Baseline·for·SUSE·Linux·enterprise·15 |
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pci-dss-4 |
| 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 39 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 40 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 42 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 43 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 44 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 46 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 47 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 48 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 49 | ·········3.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········4.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········5.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| Offset 525, 14 lines modified | Offset 525, 19 lines modified | ||
| 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 525 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 527 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 528 | ·············_\x8c_\x8i_\x8s············1.4.1 | 528 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 529 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 530 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 531 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 533 | [[packages]] | ||
| 534 | name·=·"aide" | ||
| 535 | version·=·"*" | ||
| 532 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 536 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 533 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 537 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 534 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 538 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 535 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 539 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 536 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 540 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 537 | -·name:·Ensure·aide·is·installed | 541 | -·name:·Ensure·aide·is·installed |
| 538 | ··package: | 542 | ··package: |
| Offset 548, 44 lines modified | Offset 553, 39 lines modified | ||
| 548 | ··-·PCI-DSSv4-11.5.2 | 553 | ··-·PCI-DSSv4-11.5.2 |
| 549 | ··-·enable_strategy | 554 | ··-·enable_strategy |
| 550 | ··-·low_complexity | 555 | ··-·low_complexity |
| 551 | ··-·low_disruption | 556 | ··-·low_disruption |
| 552 | ··-·medium_severity | 557 | ··-·medium_severity |
| 553 | ··-·no_reboot_needed | 558 | ··-·no_reboot_needed |
| 554 | ··-·package_aide_installed | 559 | ··-·package_aide_installed |
| 555 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 556 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 557 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 558 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 559 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 560 | include·install_aide | ||
| 561 | class·install_aide·{ | ||
| 562 | ··package·{·'aide': | ||
| 563 | ····ensure·=>·'installed', | ||
| 564 | ··} | ||
| 565 | } | ||
| 566 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 567 | [[packages]] | ||
| 568 | name·=·"aide" | ||
| 569 | version·=·"*" | ||
| 570 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 560 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 571 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 561 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 572 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 562 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 573 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 563 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 574 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 564 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 575 | #·Remediation·is·applicable·only·in·certain·platforms | 565 | #·Remediation·is·applicable·only·in·certain·platforms |
| 576 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 566 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 577 | zypper·install·-y·"aide" | 567 | zypper·install·-y·"aide" |
| 578 | else | 568 | else |
| 579 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 569 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 580 | fi | 570 | fi |
| 571 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 572 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 573 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 574 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 575 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 576 | include·install_aide | ||
| 577 | class·install_aide·{ | ||
| 578 | ··package·{·'aide': | ||
| 579 | ····ensure·=>·'installed', | ||
| 580 | ··} | ||
| 581 | } | ||
| 581 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 582 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 582 | Run·the·following·command·to·generate·a·new·database: | 583 | Run·the·following·command·to·generate·a·new·database: |
| 583 | $·sudo·/usr/bin/aide·--init | 584 | $·sudo·/usr/bin/aide·--init |
| 584 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the | 585 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the |
| 585 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure | 586 | configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/aide·(or·hashes·of·these·files),·in·a·secure |
| 586 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- | 587 | location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly- |
| 587 | generated·database·can·be·installed·as·follows: | 588 | generated·database·can·be·installed·as·follows: |
| Offset 2298, 14 lines modified | Offset 2298, 19 lines modified | ||
| 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 | 2298 | ·············_\x8i_\x8s_\x8m·····1382,·1384,·1386 |
| 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) | 2299 | ·············_\x8n_\x8i_\x8s_\x8t····CM-6(a) |
| 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 | 2300 | ·············_\x8o_\x8s_\x8p_\x8p····FMT_MOF_EXT.1 |
| 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 | 2301 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000324-GPOS-00125 |
| 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 | 2302 | ·············_\x8c_\x8i_\x8s·····1.3.1 |
| 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 | 2303 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i···R33 |
| 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 | 2304 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·2.2.6 |
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2306 | [[packages]] | ||
| 2307 | name·=·"sudo" | ||
| 2308 | version·=·"*" | ||
| 2305 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 2309 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 2306 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 2310 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 2307 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 2311 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 2308 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 2312 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 2309 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 2313 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 2310 | -·name:·Ensure·sudo·is·installed | 2314 | -·name:·Ensure·sudo·is·installed |
| 2311 | ··package: | 2315 | ··package: |
| Offset 2318, 44 lines modified | Offset 2323, 39 lines modified | ||
| 2318 | ··-·PCI-DSSv4-2.2.6 | 2323 | ··-·PCI-DSSv4-2.2.6 |
| 2319 | ··-·enable_strategy | 2324 | ··-·enable_strategy |
| 2320 | ··-·low_complexity | 2325 | ··-·low_complexity |
| 2321 | ··-·low_disruption | 2326 | ··-·low_disruption |
| 2322 | ··-·medium_severity | 2327 | ··-·medium_severity |
| 2323 | ··-·no_reboot_needed | 2328 | ··-·no_reboot_needed |
| 2324 | ··-·package_sudo_installed | 2329 | ··-·package_sudo_installed |
| 2325 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 2326 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 2327 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 2328 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 2329 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 2330 | include·install_sudo | ||
| Max diff block lines reached; 74103/79724 bytes (92.95%) of diff not shown. | |||
| Offset 14314, 15 lines modified | Offset 14314, 15 lines modified | ||
| 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | 00037e90:·3c2f·6832·3e3c·703e·4375·7272·656e·7420··</h2><p>Current· | ||
| 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | 00037ea0:·7665·7273·696f·6e3a·203c·7374·726f·6e67··version:·<strong | ||
| 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | 00037eb0:·3e30·2e31·2e37·343c·2f73·7472·6f6e·673e··>0.1.74</strong> | ||
| 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | 00037ec0:·3c2f·703e·3c75·6c3e·3c6c·693e·3c73·7472··</p><ul><li><str | ||
| 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | 00037ed0:·6f6e·673e·6472·6166·743c·2f73·7472·6f6e··ong>draft</stron | ||
| 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | 00037ee0:·673e·0a20·2020·2020·2020·2020·2020·2020··g>.············· | ||
| 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | 00037ef0:·2020·2020·2020·2028·6173·206f·6620·3230·········(as·of·20 | ||
| 00037f00:·323 | 00037f00:·3235·2d30·312d·3233·290a·2020·2020·2020··25-01-23).······ | ||
| 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | 00037f10:·2020·2020·2020·2020·2020·3c2f·6c69·3e3c············</li>< | ||
| 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | 00037f20:·2f75·6c3e·3c2f·6469·763e·3c68·323e·5461··/ul></div><h2>Ta | ||
| 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | 00037f30:·626c·6520·6f66·2043·6f6e·7465·6e74·733c··ble·of·Contents< | ||
| 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | 00037f40:·2f68·323e·3c6f·6c3e·3c6c·693e·3c61·2068··/h2><ol><li><a·h | ||
| 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | 00037f50:·7265·663d·2223·7863·6364·665f·6f72·672e··ref="#xccdf_org. | ||
| 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | 00037f60:·7373·6770·726f·6a65·6374·2e63·6f6e·7465··ssgproject.conte | ||
| 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | 00037f70:·6e74·5f67·726f·7570·5f73·7973·7465·6d22··nt_group_system" | ||
| Offset 15096, 168 lines modified | Offset 15096, 168 lines modified | ||
| 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | 0003af70:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | ||
| 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | 0003af80:·743d·2223·6964·6d36·3333·3222·2074·6162··t="#idm6332"·tab | ||
| 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | 0003af90:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | ||
| 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | 0003afa0:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | ||
| 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | 0003afb0:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | ||
| 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | 0003afc0:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | ||
| 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | 0003afd0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | ||
| 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·204 | 0003afe0:·2122·3e52·656d·6564·6961·7469·6f6e·204f··!">Remediation·O | ||
| 0003aff0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0003b000:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0003b010:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0003b020:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0003b030:·643d·2269·646d·3633·3332·223e·3c74·6162··d="idm6332"><tab | |||
| 0003b040:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0003b050:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0003b060:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0003b070:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0003b080:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0003b090:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0003b0a0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0003b0b0:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0003b0c0:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0003b0d0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0003b0e0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0003b0f0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0003 | 0003aff0:·5342·7569·6c64·2042·6c75·6570·7269·6e74··SBuild·Blueprint | ||
| 0003b000:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b010:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b020:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b030:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b040:·3633·3332·223e·3c70·7265·3e3c·636f·6465··6332"><pre><code | |||
| 0003b050:·3e0a·5b5b·7061·636b·6167·6573·5d5d·0a6e··>.[[packages]].n | |||
| 0003b060:·616d·6520·3d20·2261·6964·6522·0a76·6572··ame·=·"aide".ver | |||
| 0003b070:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | |||
| 0003b080:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 0003b090:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 0003b0a0:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 0003b0b0:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 0003b0c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 0003b0d0:·6d36·3333·3322·2074·6162·696e·6465·783d··m6333"·tabindex= | |||
| 0003b0e0:·2230·2220·726f·6c65·3d22·6275·7474·6f6e··"0"·role="button | |||
| 0003b0f0:·2220·6172·6961·2d65·7870·616e·6465·643d··"·aria-expanded= | |||
| 0003b100:·2266·616c·7365·2220·7469·746c·653d·2241··"false"·title="A | |||
| 0003b110:·6374·6976·6174·6520·746f·2072·6576·6561··ctivate·to·revea | |||
| 0003b120:·6c22·2068·7265·663d·2223·2122·3e52·656d··l"·href="#!">Rem | |||
| 0003b130:·6564·6961·7469·6f6e·2041·6e73·6962·6c65··ediation·Ansible | |||
| 0003b140:·2073·6e69·7070·6574·20e2·87b2·3c2f·613e···snippet·...</a> | |||
| 0003b150:·3c62·723e·3c64·6976·2063·6c61·7373·3d22··<br><div·class=" | |||
| 0003b160:·7061·6e65·6c2d·636f·6c6c·6170·7365·2063··panel-collapse·c | |||
| 0003b170:·6f6c·6c61·7073·6522·2069·643d·2269·646d··ollapse"·id="idm | |||
| 0003b180:·3633·3333·223e·3c74·6162·6c65·2063·6c61··6333"><table·cla | |||
| 0003b190:·7373·3d22·7461·626c·6520·7461·626c·652d··ss="table·table- | |||
| 0003b1a0:·7374·7269·7065·6420·7461·626c·652d·626f··striped·table-bo | |||
| 0003b1b0:·7264·6572·6564·2074·6162·6c65·2d63·6f6e··rdered·table-con | |||
| 0003b1c0:·6465·6e73·6564·223e·3c74·723e·3c74·683e··densed"><tr><th> | |||
| 0003b1d0:·436f·6d70·6c65·7869·7479·3a3c·2f74·683e··Complexity:</th> | |||
| 0003b1e0:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0003b1f0:·3e3c·7472·3e3c·7468·3e44·6973·7275·7074··><tr><th>Disrupt | |||
| 0003b200:·696f·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77··ion:</th><td>low | |||
| 0003b210:·3c2f·7464·3e3c·2f74·723e·3c74·723e·3c74··</td></tr><tr><t | |||
| 0003b220:·683e·5265·626f·6f74·3a3c·2f74·683e·3c74··h>Reboot:</th><t | |||
| 0003b | 0003b230:·643e·6661·6c73·653c·2f74·643e·3c2f·7472··d>false</td></tr | ||
| 0003b120:·3e3c·2f74·6162·6c65·3e3c·7072·653e·3c63··></table><pre><c | |||
| 0003b130:·6f64·653e·2d20·6e61·6d65·3a20·456e·7375··ode>-·name:·Ensu | |||
| 0003b140:·7265·2061·6964·6520·6973·2069·6e73·7461··re·aide·is·insta | |||
| 0003b150:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 0003b160:·2020·2020·6e61·6d65·3a20·6169·6465·0a20······name:·aide.· | |||
| 0003b170:·2020·2073·7461·7465·3a20·7072·6573·656e·····state:·presen | |||
| 0003b180:·740a·2020·7768·656e·3a20·616e·7369·626c··t.··when:·ansibl | |||
| 0003b190:·655f·7669·7274·7561·6c69·7a61·7469·6f6e··e_virtualization | |||
| 0003b1a0:·5f74·7970·6520·6e6f·7420·696e·205b·2264··_type·not·in·["d | |||
| 0003b1b0:·6f63·6b65·7222·2c20·226c·7863·222c·2022··ocker",·"lxc",·" | |||
| 0003b1c0:·6f70·656e·767a·222c·2022·706f·646d·616e··openvz",·"podman | |||
| 0003b1d0:·222c·2022·636f·6e74·6169·6e65·7222·5d0a··",·"container"]. | |||
| 0003b1e0:·2020·7461·6773·3a0a·2020·2d20·4343·452d····tags:.··-·CCE- | |||
| 0003b1f0:·3833·3238·392d·390a·2020·2d20·434a·4953··83289-9.··-·CJIS | |||
| 0003b200:·2d35·2e31·302e·312e·330a·2020·2d20·4449··-5.10.1.3.··-·DI | |||
| 0003b210:·5341·2d53·5449·472d·534c·4553·2d31·352d··SA-STIG-SLES-15- | |||
| 0003b220:·3031·3034·3139·0a20·202d·204e·4953·542d··010419.··-·NIST- | |||
| 0003b230:·3830·302d·3533·2d43·4d2d·3628·6129·0a20··800-53-CM-6(a).· | |||
| 0003b240:·202d·2050·4349·2d44·5353·2d52·6571·2d31···-·PCI-DSS-Req-1 | |||
| 0003b250:·312e·350a·2020·2d20·5043·492d·4453·5376··1.5.··-·PCI-DSSv | |||
| 0003b260:·342d·3131·2e35·2e32·0a20·202d·2065·6e61··4-11.5.2.··-·ena | |||
| 0003b270:·626c·655f·7374·7261·7465·6779·0a20·202d··ble_strategy.··- | |||
| 0003b280:·206c·6f77·5f63·6f6d·706c·6578·6974·790a···low_complexity. | |||
| 0003b290:·2020·2d20·6c6f·775f·6469·7372·7570·7469····-·low_disrupti | |||
| 0003b2a0:·6f6e·0a20·202d·206d·6564·6975·6d5f·7365··on.··-·medium_se | |||
| 0003b2b0:·7665·7269·7479·0a20·202d·206e·6f5f·7265··verity.··-·no_re | |||
| 0003b2c0:·626f·6f74·5f6e·6565·6465·640a·2020·2d20··boot_needed.··-· | |||
| 0003b2d0:·7061·636b·6167·655f·6169·6465·5f69·6e73··package_aide_ins | |||
| 0003b2 | 0003b240:·3e3c·7472·3e3c·7468·3e53·7472·6174·6567··><tr><th>Strateg | ||
| 0003b250:·793a·3c2f·7468·3e3c·7464·3e65·6e61·626c··y:</th><td>enabl | |||
| 0003b260:·653c·2f74·643e·3c2f·7472·3e3c·2f74·6162··e</td></tr></tab | |||
| 0003b270:·6c65·3e3c·7072·653e·3c63·6f64·653e·2d20··le><pre><code>-· | |||
| 0003b280:·6e61·6d65·3a20·456e·7375·7265·2061·6964··name:·Ensure·aid | |||
| 0003b290:·6520·6973·2069·6e73·7461·6c6c·6564·0a20··e·is·installed.· | |||
| 0003b2a0:·2070·6163·6b61·6765·3a0a·2020·2020·6e61···package:.····na | |||
| 0003b2b0:·6d65·3a20·6169·6465·0a20·2020·2073·7461··me:·aide.····sta | |||
| 0003b2c0:·7465·3a20·7072·6573·656e·740a·2020·7768··te:·present.··wh | |||
| 0003b2d0:·656e·3a20·616e·7369·626c·655f·7669·7274··en:·ansible_virt | |||
| 0003b2e0:·7561·6c69·7a61·7469·6f6e·5f74·7970·6520··ualization_type· | |||
| 0003b2f0:·6e6f·7420·696e·205b·2264·6f63·6b65·7222··not·in·["docker" | |||
| 0003b300:·2c20·226c·7863·222c·2022·6f70·656e·767a··,·"lxc",·"openvz | |||
| 0003b310:·222c·2022·706f·646d·616e·222c·2022·636f··",·"podman",·"co | |||
| 0003b320:·6e74·6169·6e65·7222·5d0a·2020·7461·6773··ntainer"].··tags | |||
| 0003b330:·3a0a·2020·2d20·4343·452d·3833·3238·392d··:.··-·CCE-83289- | |||
| 0003b340:·390a·2020·2d20·434a·4953·2d35·2e31·302e··9.··-·CJIS-5.10. | |||
| 0003b350:·312e·330a·2020·2d20·4449·5341·2d53·5449··1.3.··-·DISA-STI | |||
| 0003b360:·472d·534c·4553·2d31·352d·3031·3034·3139··G-SLES-15-010419 | |||
| 0003b370:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0003b380:·2d43·4d2d·3628·6129·0a20·202d·2050·4349··-CM-6(a).··-·PCI | |||
| Max diff block lines reached; 148574/171536 bytes (86.61%) of diff not shown. | |||
| Offset 42, 15 lines modified | Offset 42, 15 lines modified | ||
| 42 | ··············(SLES)·for·SAP·Applications·15 | 42 | ··············(SLES)·for·SAP·Applications·15 |
| 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap | 43 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening-sap |
| 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 44 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 46 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 48 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 49 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 50 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 51 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 52 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 53 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 54 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 55 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 56 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 113, 14 lines modified | Offset 113, 19 lines modified | ||
| 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 113 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 114 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 115 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 116 | ·············_\x8c_\x8i_\x8s············1.4.1 | 116 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 117 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 118 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 119 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 121 | [[packages]] | ||
| 122 | name·=·"aide" | ||
| 123 | version·=·"*" | ||
| 120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 124 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 121 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 125 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 122 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 126 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 123 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 127 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 124 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 128 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 125 | -·name:·Ensure·aide·is·installed | 129 | -·name:·Ensure·aide·is·installed |
| 126 | ··package: | 130 | ··package: |
| Offset 136, 44 lines modified | Offset 141, 39 lines modified | ||
| 136 | ··-·PCI-DSSv4-11.5.2 | 141 | ··-·PCI-DSSv4-11.5.2 |
| 137 | ··-·enable_strategy | 142 | ··-·enable_strategy |
| 138 | ··-·low_complexity | 143 | ··-·low_complexity |
| 139 | ··-·low_disruption | 144 | ··-·low_disruption |
| 140 | ··-·medium_severity | 145 | ··-·medium_severity |
| 141 | ··-·no_reboot_needed | 146 | ··-·no_reboot_needed |
| 142 | ··-·package_aide_installed | 147 | ··-·package_aide_installed |
| 143 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 144 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 145 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 146 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 147 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 148 | include·install_aide | ||
| 149 | class·install_aide·{ | ||
| 150 | ··package·{·'aide': | ||
| 151 | ····ensure·=>·'installed', | ||
| 152 | ··} | ||
| 153 | } | ||
| 154 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 155 | [[packages]] | ||
| 156 | name·=·"aide" | ||
| 157 | version·=·"*" | ||
| 158 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 148 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 159 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 149 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 160 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 150 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 161 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 151 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 162 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 152 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 163 | #·Remediation·is·applicable·only·in·certain·platforms | 153 | #·Remediation·is·applicable·only·in·certain·platforms |
| 164 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 154 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 165 | zypper·install·-y·"aide" | 155 | zypper·install·-y·"aide" |
| 166 | else | 156 | else |
| 167 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 157 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 168 | fi | 158 | fi |
| 159 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 160 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 161 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 162 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 163 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 164 | include·install_aide | ||
| 165 | class·install_aide·{ | ||
| 166 | ··package·{·'aide': | ||
| 167 | ····ensure·=>·'installed', | ||
| 168 | ··} | ||
| 169 | } | ||
| 169 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 170 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·A\x8AI\x8ID\x8DE\x8E·t\x8to\x8o·V\x8Ve\x8er\x8ri\x8if\x8fy\x8y·t\x8th\x8he\x8e·A\x8Au\x8ud\x8di\x8it\x8t·T\x8To\x8oo\x8ol\x8ls\x8s·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 170 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. | 171 | The·operating·system·file·integrity·tool·must·be·configured·to·protect·the·integrity·of·the·audit·tools. |
| 171 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward | 172 | ·············Protecting·the·integrity·of·the·tools·used·for·auditing·purposes·is·a·critical·step·toward |
| 172 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., | 173 | ·············ensuring·the·integrity·of·audit·information.·Audit·information·includes·all·information·(e.g., |
| 173 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information | 174 | ·············audit·records,·audit·settings,·and·audit·reports)·needed·to·successfully·audit·information |
| 174 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source | 175 | ·············system·activity.·Audit·tools·include·but·are·not·limited·to·vendor-provided·and·open-source |
| 175 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and | 176 | ·············audit·tools·needed·to·successfully·view·and·manipulate·audit·information·system·activity·and |
| Offset 8764, 14 lines modified | Offset 8764, 19 lines modified | ||
| 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 | 8764 | References:··_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9 |
| 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 8765 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 8766 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 8767 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 8768 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 | 8769 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS-00227 |
| 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 8770 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8772 | [[packages]] | ||
| 8773 | name·=·"rsyslog" | ||
| 8774 | version·=·"*" | ||
| 8771 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 8775 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 8772 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 8776 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 8773 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 8777 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 8774 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 8778 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 8775 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 8779 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 8776 | -·name:·Ensure·rsyslog·is·installed | 8780 | -·name:·Ensure·rsyslog·is·installed |
| 8777 | ··package: | 8781 | ··package: |
| Offset 8783, 44 lines modified | Offset 8788, 39 lines modified | ||
| 8783 | ··-·NIST-800-53-CM-6(a) | 8788 | ··-·NIST-800-53-CM-6(a) |
| 8784 | ··-·enable_strategy | 8789 | ··-·enable_strategy |
| 8785 | ··-·low_complexity | 8790 | ··-·low_complexity |
| 8786 | ··-·low_disruption | 8791 | ··-·low_disruption |
| 8787 | ··-·medium_severity | 8792 | ··-·medium_severity |
| 8788 | ··-·no_reboot_needed | 8793 | ··-·no_reboot_needed |
| 8789 | ··-·package_rsyslog_installed | 8794 | ··-·package_rsyslog_installed |
| 8790 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 8791 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 8792 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 8793 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 8794 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 8795 | include·install_rsyslog | ||
| Max diff block lines reached; 18768/24799 bytes (75.68%) of diff not shown. | |||
| Offset 14300, 16 lines modified | Offset 14300, 16 lines modified | ||
| 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | 00037db0:·7669·7369·6f6e·2048·6973·746f·7279·3c2f··vision·History</ | ||
| 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | 00037dc0:·6832·3e3c·703e·4375·7272·656e·7420·7665··h2><p>Current·ve | ||
| 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | 00037dd0:·7273·696f·6e3a·203c·7374·726f·6e67·3e30··rsion:·<strong>0 | ||
| 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | 00037de0:·2e31·2e37·343c·2f73·7472·6f6e·673e·3c2f··.1.74</strong></ | ||
| 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | 00037df0:·703e·3c75·6c3e·3c6c·693e·3c73·7472·6f6e··p><ul><li><stron | ||
| 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | 00037e00:·673e·6472·6166·743c·2f73·7472·6f6e·673e··g>draft</strong> | ||
| 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037e10:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037e20:·2020·2020·2028·6173·206f·6620·3230·323 | 00037e20:·2020·2020·2028·6173·206f·6620·3230·3235·······(as·of·2025 | ||
| 00037e30:·2d30·3 | 00037e30:·2d30·312d·3233·290a·2020·2020·2020·2020··-01-23).········ | ||
| 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | 00037e40:·2020·2020·2020·2020·3c2f·6c69·3e3c·2f75··········</li></u | ||
| 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | 00037e50:·6c3e·3c2f·6469·763e·3c68·323e·5461·626c··l></div><h2>Tabl | ||
| 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | 00037e60:·6520·6f66·2043·6f6e·7465·6e74·733c·2f68··e·of·Contents</h | ||
| 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | 00037e70:·323e·3c6f·6c3e·3c6c·693e·3c61·2068·7265··2><ol><li><a·hre | ||
| 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | 00037e80:·663d·2223·7863·6364·665f·6f72·672e·7373··f="#xccdf_org.ss | ||
| 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | 00037e90:·6770·726f·6a65·6374·2e63·6f6e·7465·6e74··gproject.content | ||
| 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S | 00037ea0:·5f67·726f·7570·5f73·7973·7465·6d22·3e53··_group_system">S |
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Public·Cloud·Hardening·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_pcs-hardening |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 50 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 51 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 52 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 14307, 15 lines modified | Offset 14307, 15 lines modified | ||
| 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | 00037e20:·7279·3c2f·6832·3e3c·703e·4375·7272·656e··ry</h2><p>Curren | ||
| 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | 00037e30:·7420·7665·7273·696f·6e3a·203c·7374·726f··t·version:·<stro | ||
| 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | 00037e40:·6e67·3e30·2e31·2e37·343c·2f73·7472·6f6e··ng>0.1.74</stron | ||
| 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | 00037e50:·673e·3c2f·703e·3c75·6c3e·3c6c·693e·3c73··g></p><ul><li><s | ||
| 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | 00037e60:·7472·6f6e·673e·6472·6166·743c·2f73·7472··trong>draft</str | ||
| 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | 00037e70:·6f6e·673e·0a20·2020·2020·2020·2020·2020··ong>.··········· | ||
| 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | 00037e80:·2020·2020·2020·2020·2028·6173·206f·6620···········(as·of· | ||
| 00037e90:·3230·323 | 00037e90:·3230·3235·2d30·312d·3233·290a·2020·2020··2025-01-23).···· | ||
| 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | 00037ea0:·2020·2020·2020·2020·2020·2020·3c2f·6c69··············</li | ||
| 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | 00037eb0:·3e3c·2f75·6c3e·3c2f·6469·763e·3c68·323e··></ul></div><h2> | ||
| 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | 00037ec0:·5461·626c·6520·6f66·2043·6f6e·7465·6e74··Table·of·Content | ||
| 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | 00037ed0:·733c·2f68·323e·3c6f·6c3e·3c6c·693e·3c61··s</h2><ol><li><a | ||
| 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | 00037ee0:·2068·7265·663d·2223·7863·6364·665f·6f72···href="#xccdf_or | ||
| 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | 00037ef0:·672e·7373·6770·726f·6a65·6374·2e63·6f6e··g.ssgproject.con | ||
| 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | 00037f00:·7465·6e74·5f67·726f·7570·5f73·7973·7465··tent_group_syste | ||
| Offset 27247, 164 lines modified | Offset 27247, 164 lines modified | ||
| 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | 0006a6e0:·6522·2064·6174·612d·7461·7267·6574·3d22··e"·data-target=" | ||
| 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | 0006a6f0:·2369·646d·3137·3335·3322·2074·6162·696e··#idm17353"·tabin | ||
| 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | 0006a700:·6465·783d·2230·2220·726f·6c65·3d22·6275··dex="0"·role="bu | ||
| 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | 0006a710:·7474·6f6e·2220·6172·6961·2d65·7870·616e··tton"·aria-expan | ||
| 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | 0006a720:·6465·643d·2266·616c·7365·2220·7469·746c··ded="false"·titl | ||
| 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | 0006a730:·653d·2241·6374·6976·6174·6520·746f·2072··e="Activate·to·r | ||
| 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | 0006a740:·6576·6561·6c22·2068·7265·663d·2223·2122··eveal"·href="#!" | ||
| 0006a750:·3e52·656d·6564·6961·7469·6f6e·204 | 0006a750:·3e52·656d·6564·6961·7469·6f6e·204f·5342··>Remediation·OSB | ||
| 0006a760:·6962·6c65·2073·6e69·7070·6574·20e2·87b2··ible·snippet·... | |||
| 0006a770:·3c2f·613e·3c62·723e·3c64·6976·2063·6c61··</a><br><div·cla | |||
| 0006a780:·7373·3d22·7061·6e65·6c2d·636f·6c6c·6170··ss="panel-collap | |||
| 0006a790:·7365·2063·6f6c·6c61·7073·6522·2069·643d··se·collapse"·id= | |||
| 0006a7a0:·2269·646d·3137·3335·3322·3e3c·7461·626c··"idm17353"><tabl | |||
| 0006a7b0:·6520·636c·6173·733d·2274·6162·6c65·2074··e·class="table·t | |||
| 0006a7c0:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 0006a7d0:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 0006a7e0:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 0006a7f0:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 0006a800:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 0006a810:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 0006a | 0006a760:·7569·6c64·2042·6c75·6570·7269·6e74·2073··uild·Blueprint·s | ||
| 0006a770:·6e69·7070·6574·20e2·87b2·3c2f·613e·3c62··nippet·...</a><b | |||
| 0006a780:·723e·3c64·6976·2063·6c61·7373·3d22·7061··r><div·class="pa | |||
| 0006a790:·6e65·6c2d·636f·6c6c·6170·7365·2063·6f6c··nel-collapse·col | |||
| 0006a7a0:·6c61·7073·6522·2069·643d·2269·646d·3137··lapse"·id="idm17 | |||
| 0006a7b0:·3335·3322·3e3c·7072·653e·3c63·6f64·653e··353"><pre><code> | |||
| 0006a7c0:·0a5b·5b70·6163·6b61·6765·735d·5d0a·6e61··.[[packages]].na | |||
| 0006a7d0:·6d65·203d·2022·7273·7973·6c6f·6722·0a76··me·=·"rsyslog".v | |||
| 0006a7e0:·6572·7369·6f6e·203d·2022·2a22·0a3c·2f63··ersion·=·"*".</c | |||
| 0006a7f0:·6f64·653e·3c2f·7072·653e·3c2f·6469·763e··ode></pre></div> | |||
| 0006a800:·3c61·2063·6c61·7373·3d22·6274·6e20·6274··<a·class="btn·bt | |||
| 0006a810:·6e2d·7375·6363·6573·7322·2064·6174·612d··n-success"·data- | |||
| 0006a820:·746f·6767·6c65·3d22·636f·6c6c·6170·7365··toggle="collapse | |||
| 0006a830:·2220·6461·7461·2d74·6172·6765·743d·2223··"·data-target="# | |||
| 0006a840:·6964·6d31·3733·3534·2220·7461·6269·6e64··idm17354"·tabind | |||
| 0006a850:·6578·3d22·3022·2072·6f6c·653d·2262·7574··ex="0"·role="but | |||
| 0006a860:·746f·6e22·2061·7269·612d·6578·7061·6e64··ton"·aria-expand | |||
| 0006a870:·6564·3d22·6661·6c73·6522·2074·6974·6c65··ed="false"·title | |||
| 0006a880:·3d22·4163·7469·7661·7465·2074·6f20·7265··="Activate·to·re | |||
| 0006a890:·7665·616c·2220·6872·6566·3d22·2321·223e··veal"·href="#!"> | |||
| 0006a8a0:·5265·6d65·6469·6174·696f·6e20·416e·7369··Remediation·Ansi | |||
| 0006a8b0:·626c·6520·736e·6970·7065·7420·e287·b23c··ble·snippet·...< | |||
| 0006a8c0:·2f61·3e3c·6272·3e3c·6469·7620·636c·6173··/a><br><div·clas | |||
| 0006a8d0:·733d·2270·616e·656c·2d63·6f6c·6c61·7073··s="panel-collaps | |||
| 0006a8e0:·6520·636f·6c6c·6170·7365·2220·6964·3d22··e·collapse"·id=" | |||
| 0006a8f0:·6964·6d31·3733·3534·223e·3c74·6162·6c65··idm17354"><table | |||
| 0006a900:·2063·6c61·7373·3d22·7461·626c·6520·7461···class="table·ta | |||
| 0006a910:·626c·652d·7374·7269·7065·6420·7461·626c··ble-striped·tabl | |||
| 0006a920:·652d·626f·7264·6572·6564·2074·6162·6c65··e-bordered·table | |||
| 0006a930:·2d63·6f6e·6465·6e73·6564·223e·3c74·723e··-condensed"><tr> | |||
| 0006a940:·3c74·683e·436f·6d70·6c65·7869·7479·3a3c··<th>Complexity:< | |||
| 0006a950:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0006a960:·3c2f·7472·3e3c·7472·3e3c·7468·3e44·6973··</tr><tr><th>Dis | |||
| 0006a970:·7275·7074·696f·6e3a·3c2f·7468·3e3c·7464··ruption:</th><td | |||
| 0006a980:·3e6c·6f77·3c2f·7464·3e3c·2f74·723e·3c74··>low</td></tr><t | |||
| 0006a990:·723e·3c74·683e·5265·626f·6f74·3a3c·2f74··r><th>Reboot:</t | |||
| 0006a9a0:·683e·3c74·643e·6661·6c73·653c·2f74·643e··h><td>false</td> | |||
| 0006a9b0:·3c2f·7472·3e3c·7472·3e3c·7468·3e53·7472··</tr><tr><th>Str | |||
| 0006a9c0:·6174·6567·793a·3c2f·7468·3e3c·7464·3e65··ategy:</th><td>e | |||
| 0006a | 0006a9d0:·6e61·626c·653c·2f74·643e·3c2f·7472·3e3c··nable</td></tr>< | ||
| 0006a9e0:·2f74·6162·6c65·3e3c·7072·653e·3c63·6f64··/table><pre><cod | |||
| 0006a9f0:·653e·2d20·6e61·6d65·3a20·456e·7375·7265··e>-·name:·Ensure | |||
| 0006aa00:·2072·7379·736c·6f67·2069·7320·696e·7374···rsyslog·is·inst | |||
| 0006aa10:·616c·6c65·640a·2020·7061·636b·6167·653a··alled.··package: | |||
| 0006aa20:·0a20·2020·206e·616d·653a·2072·7379·736c··.····name:·rsysl | |||
| 0006aa30:·6f67·0a20·2020·2073·7461·7465·3a20·7072··og.····state:·pr | |||
| 0006aa40:·6573·656e·740a·2020·7768·656e·3a20·616e··esent.··when:·an | |||
| 0006aa50:·7369·626c·655f·7669·7274·7561·6c69·7a61··sible_virtualiza | |||
| 0006aa60:·7469·6f6e·5f74·7970·6520·6e6f·7420·696e··tion_type·not·in | |||
| 0006aa70:·205b·2264·6f63·6b65·7222·2c20·226c·7863···["docker",·"lxc | |||
| 0006aa80:·222c·2022·6f70·656e·767a·222c·2022·706f··",·"openvz",·"po | |||
| 0006aa90:·646d·616e·222c·2022·636f·6e74·6169·6e65··dman",·"containe | |||
| 0006aaa0:·7222·5d0a·2020·7461·6773·3a0a·2020·2d20··r"].··tags:.··-· | |||
| 0006aab0:·4343·452d·3931·3136·312d·300a·2020·2d20··CCE-91161-0.··-· | |||
| 0006aac0:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0006aad0:·2861·290a·2020·2d20·656e·6162·6c65·5f73··(a).··-·enable_s | |||
| 0006aae0:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0006aaf0:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0006ab00:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0006ab10:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0006ab20:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0006ab30:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0006ab40:·6765·5f72·7379·736c·6f67·5f69·6e73·7461··ge_rsyslog_insta | |||
| 0006a840:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 0006a850:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 0006a860:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 0006a870:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 0006a880:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 0006a890:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 0006a8a0:·6465·3e2d·206e·616d·653a·2045·6e73·7572··de>-·name:·Ensur | |||
| 0006a8b0:·6520·7273·7973·6c6f·6720·6973·2069·6e73··e·rsyslog·is·ins | |||
| 0006a8c0:·7461·6c6c·6564·0a20·2070·6163·6b61·6765··talled.··package | |||
| 0006a8d0:·3a0a·2020·2020·6e61·6d65·3a20·7273·7973··:.····name:·rsys | |||
| 0006a8e0:·6c6f·670a·2020·2020·7374·6174·653a·2070··log.····state:·p | |||
| 0006a8f0:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0006a900:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0006a910:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0006a920:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0006a930:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0006a940:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0006a950:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0006a960:·2043·4345·2d39·3131·3631·2d30·0a20·202d···CCE-91161-0.··- | |||
| 0006a970:·204e·4953·542d·3830·302d·3533·2d43·4d2d···NIST-800-53-CM- | |||
| 0006a980:·3628·6129·0a20·202d·2065·6e61·626c·655f··6(a).··-·enable_ | |||
| 0006a990:·7374·7261·7465·6779·0a20·202d·206c·6f77··strategy.··-·low | |||
| 0006a9a0:·5f63·6f6d·706c·6578·6974·790a·2020·2d20··_complexity.··-· | |||
| 0006a9b0:·6c6f·775f·6469·7372·7570·7469·6f6e·0a20··low_disruption.· | |||
| 0006a9c0:·202d·206d·6564·6975·6d5f·7365·7665·7269···-·medium_severi | |||
| 0006a9d0:·7479·0a20·202d·206e·6f5f·7265·626f·6f74··ty.··-·no_reboot | |||
| 0006a9e0:·5f6e·6565·6465·640a·2020·2d20·7061·636b··_needed.··-·pack | |||
| 0006a9f0:·6167·655f·7273·7973·6c6f·675f·696e·7374··age_rsyslog_inst | |||
| Max diff block lines reached; 363546/385956 bytes (94.19%) of diff not shown. | |||
| Offset 41, 15 lines modified | Offset 41, 15 lines modified | ||
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·SUSE·Linux·Enterprise·15 |
| 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 42 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 43 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 44 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 45 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 47 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 48 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 49 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 50 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 51 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 52 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 53 | ·········3.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s | 54 | ·········4.·_\x8N_\x8e_\x8t_\x8w_\x8o_\x8r_\x8k_\x8·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8F_\x8i_\x8r_\x8e_\x8w_\x8a_\x8l_\x8l_\x8s |
| 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 55 | ·········5.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| Offset 3160, 14 lines modified | Offset 3160, 19 lines modified | ||
| 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 | 3160 | References:··_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1 |
| 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) | 3161 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a) |
| 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 | 3162 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.PT-1 |
| 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 | 3163 | ·············_\x8o_\x8s_\x8p_\x8p···········FTP_ITC_EXT.1.1 |
| 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- | 3164 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000479-GPOS-00224,·SRG-OS-000051-GPOS-00024,·SRG-OS-000480-GPOS- |
| 3165 | ····························00227 | 3165 | ····························00227 |
| 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 | 3166 | ·············_\x8c_\x8i_\x8s············4.2.1.1 |
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3168 | [[packages]] | ||
| 3169 | name·=·"rsyslog" | ||
| 3170 | version·=·"*" | ||
| 3167 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3171 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3168 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3172 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3169 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3173 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3170 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3174 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3171 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3175 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3172 | -·name:·Ensure·rsyslog·is·installed | 3176 | -·name:·Ensure·rsyslog·is·installed |
| 3173 | ··package: | 3177 | ··package: |
| Offset 3179, 44 lines modified | Offset 3184, 39 lines modified | ||
| 3179 | ··-·NIST-800-53-CM-6(a) | 3184 | ··-·NIST-800-53-CM-6(a) |
| 3180 | ··-·enable_strategy | 3185 | ··-·enable_strategy |
| 3181 | ··-·low_complexity | 3186 | ··-·low_complexity |
| 3182 | ··-·low_disruption | 3187 | ··-·low_disruption |
| 3183 | ··-·medium_severity | 3188 | ··-·medium_severity |
| 3184 | ··-·no_reboot_needed | 3189 | ··-·no_reboot_needed |
| 3185 | ··-·package_rsyslog_installed | 3190 | ··-·package_rsyslog_installed |
| 3186 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3187 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3188 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3189 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3190 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3191 | include·install_rsyslog | ||
| 3192 | class·install_rsyslog·{ | ||
| 3193 | ··package·{·'rsyslog': | ||
| 3194 | ····ensure·=>·'installed', | ||
| 3195 | ··} | ||
| 3196 | } | ||
| 3197 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3198 | [[packages]] | ||
| 3199 | name·=·"rsyslog" | ||
| 3200 | version·=·"*" | ||
| 3201 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 3191 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 3202 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3192 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3203 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3193 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3204 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3194 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3205 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3195 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3206 | #·Remediation·is·applicable·only·in·certain·platforms | 3196 | #·Remediation·is·applicable·only·in·certain·platforms |
| 3207 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 3197 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 3208 | zypper·install·-y·"rsyslog" | 3198 | zypper·install·-y·"rsyslog" |
| 3209 | else | 3199 | else |
| 3210 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 3200 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 3211 | fi | 3201 | fi |
| 3202 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3203 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3204 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3205 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3206 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3207 | include·install_rsyslog | ||
| 3208 | class·install_rsyslog·{ | ||
| 3209 | ··package·{·'rsyslog': | ||
| 3210 | ····ensure·=>·'installed', | ||
| 3211 | ··} | ||
| 3212 | } | ||
| 3212 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 3213 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·E\x8En\x8na\x8ab\x8bl\x8le\x8e·r\x8rs\x8sy\x8ys\x8sl\x8lo\x8og\x8g·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 3213 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·SUSE·Linux·Enterprise·15.·The·rsyslog | 3214 | The·rsyslog·service·provides·syslog-style·logging·by·default·on·SUSE·Linux·Enterprise·15.·The·rsyslog |
| 3214 | service·can·be·enabled·with·the·following·command: | 3215 | service·can·be·enabled·with·the·following·command: |
| 3215 | $·sudo·systemctl·enable·rsyslog.service | 3216 | $·sudo·systemctl·enable·rsyslog.service |
| 3216 | Rationale:···The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are | 3217 | Rationale:···The·rsyslog·service·must·be·running·in·order·to·provide·logging·services,·which·are |
| 3217 | ·············essential·to·system·administration. | 3218 | ·············essential·to·system·administration. |
| 3218 | Severity: ···medium | 3219 | Severity: ···medium |
| Offset 3232, 14 lines modified | Offset 3232, 18 lines modified | ||
| 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 | 3232 | ·············_\x8i_\x8s_\x8a_\x8-_\x86_\x82_\x84_\x84_\x83_\x8-_\x82_\x80_\x81_\x83·SR·2.10,·SR·2.11,·SR·2.12,·SR·2.8,·SR·2.9,·SR·6.1,·SR·6.2,·SR·7.1,·SR·7.2 |
| 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, | 3233 | ·············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.12.1.3,·A.12.4.1,·A.12.4.2,·A.12.4.3,·A.12.4.4,·A.12.7.1,·A.14.2.7, |
| 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 | 3234 | ····························A.15.2.1,·A.15.2.2,·A.17.2.1 |
| 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) | 3235 | ·············_\x8n_\x8i_\x8s_\x8t···········CM-6(a),·AU-4(1) |
| 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 | 3236 | ·············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······DE.CM-1,·DE.CM-3,·DE.CM-7,·ID.SC-4,·PR.DS-4,·PR.PT-1 |
| 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 | 3237 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000480-GPOS-00227 |
| 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 | 3238 | ·············_\x8c_\x8i_\x8s············4.2.1.2 |
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3240 | [customizations.services] | ||
| 3241 | enabled·=·["rsyslog"] | ||
| 3239 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 3242 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 3240 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 3243 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 3241 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 3244 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 3242 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 3245 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 3243 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 3246 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 3244 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog | 3247 | -·name:·Enable·rsyslog·Service·-·Enable·service·rsyslog |
| 3245 | ··block: | 3248 | ··block: |
| Offset 3263, 31 lines modified | Offset 3267, 14 lines modified | ||
| 3263 | ··-·NIST-800-53-CM-6(a) | 3267 | ··-·NIST-800-53-CM-6(a) |
| 3264 | ··-·enable_strategy | 3268 | ··-·enable_strategy |
| 3265 | ··-·low_complexity | 3269 | ··-·low_complexity |
| 3266 | ··-·low_disruption | 3270 | ··-·low_disruption |
| 3267 | ··-·medium_severity | 3271 | ··-·medium_severity |
| 3268 | ··-·no_reboot_needed | 3272 | ··-·no_reboot_needed |
| 3269 | ··-·service_rsyslog_enabled | 3273 | ··-·service_rsyslog_enabled |
| 3270 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 3271 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 3272 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 3273 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 3274 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 3275 | include·enable_rsyslog | ||
| 3276 | class·enable_rsyslog·{ | ||
| Max diff block lines reached; 43583/49549 bytes (87.96%) of diff not shown. | |||
| Offset 14297, 15 lines modified | Offset 14297, 15 lines modified | ||
| 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d80:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d90:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037da0:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037db0:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037dc0:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037dd0:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037de0:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037df0:·6173·206f·6620·3230·323 | 00037df0:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037e00:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037e10:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037e20:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037e30:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037e40:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037e50:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037e60:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 15107, 168 lines modified | Offset 15107, 168 lines modified | ||
| 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | 0003b020:·2064·6174·612d·7461·7267·6574·3d22·2369···data-target="#i | ||
| 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | 0003b030:·646d·3633·3332·2220·7461·6269·6e64·6578··dm6332"·tabindex | ||
| 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | 0003b040:·3d22·3022·2072·6f6c·653d·2262·7574·746f··="0"·role="butto | ||
| 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | 0003b050:·6e22·2061·7269·612d·6578·7061·6e64·6564··n"·aria-expanded | ||
| 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | 0003b060:·3d22·6661·6c73·6522·2074·6974·6c65·3d22··="false"·title=" | ||
| 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | 0003b070:·4163·7469·7661·7465·2074·6f20·7265·7665··Activate·to·reve | ||
| 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | 0003b080:·616c·2220·6872·6566·3d22·2321·223e·5265··al"·href="#!">Re | ||
| 0003b090:·6d65·6469·6174·696f·6e20·4 | 0003b090:·6d65·6469·6174·696f·6e20·4f53·4275·696c··mediation·OSBuil | ||
| 0003b0a0:·6520·736e·6970·7065·7420·e287·b23c·2f61··e·snippet·...</a | |||
| 0003b0b0:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0003b0c0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0003b0d0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0003b0e0:·6d36·3333·3222·3e3c·7461·626c·6520·636c··m6332"><table·cl | |||
| 0003b0f0:·6173·733d·2274·6162·6c65·2074·6162·6c65··ass="table·table | |||
| 0003b100:·2d73·7472·6970·6564·2074·6162·6c65·2d62··-striped·table-b | |||
| 0003b110:·6f72·6465·7265·6420·7461·626c·652d·636f··ordered·table-co | |||
| 0003b120:·6e64·656e·7365·6422·3e3c·7472·3e3c·7468··ndensed"><tr><th | |||
| 0003b130:·3e43·6f6d·706c·6578·6974·793a·3c2f·7468··>Complexity:</th | |||
| 0003b140:·3e3c·7464·3e6c·6f77·3c2f·7464·3e3c·2f74··><td>low</td></t | |||
| 0003b150:·723e·3c74·723e·3c74·683e·4469·7372·7570··r><tr><th>Disrup | |||
| 0003b160:·7469·6f6e·3a3c·2f74·683e·3c74·643e·6c6f··tion:</th><td>lo | |||
| 0003b170:·773c·2f74·643e·3c2f·7472·3e3c·7472·3e3c··w</td></tr><tr>< | |||
| 0003b180:·7468·3e52·6562·6f6f·743a·3c2f·7468·3e3c··th>Reboot:</th>< | |||
| 0003b190:·7464·3e66·616c·7365·3c2f·7464·3e3c·2f74··td>false</td></t | |||
| 0003b1a0:·723e·3c74·723e·3c74·683e·5374·7261·7465··r><tr><th>Strate | |||
| 0003b | 0003b0a0:·6420·426c·7565·7072·696e·7420·736e·6970··d·Blueprint·snip | ||
| 0003b0b0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b0c0:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b0d0:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b0e0:·7365·2220·6964·3d22·6964·6d36·3333·3222··se"·id="idm6332" | |||
| 0003b0f0:·3e3c·7072·653e·3c63·6f64·653e·0a5b·5b70··><pre><code>.[[p | |||
| 0003b100:·6163·6b61·6765·735d·5d0a·6e61·6d65·203d··ackages]].name·= | |||
| 0003b110:·2022·6169·6465·220a·7665·7273·696f·6e20···"aide".version· | |||
| 0003b120:·3d20·222a·220a·3c2f·636f·6465·3e3c·2f70··=·"*".</code></p | |||
| 0003b130:·7265·3e3c·2f64·6976·3e3c·6120·636c·6173··re></div><a·clas | |||
| 0003b140:·733d·2262·746e·2062·746e·2d73·7563·6365··s="btn·btn-succe | |||
| 0003b150:·7373·2220·6461·7461·2d74·6f67·676c·653d··ss"·data-toggle= | |||
| 0003b160:·2263·6f6c·6c61·7073·6522·2064·6174·612d··"collapse"·data- | |||
| 0003b170:·7461·7267·6574·3d22·2369·646d·3633·3333··target="#idm6333 | |||
| 0003b180:·2220·7461·6269·6e64·6578·3d22·3022·2072··"·tabindex="0"·r | |||
| 0003b190:·6f6c·653d·2262·7574·746f·6e22·2061·7269··ole="button"·ari | |||
| 0003b1a0:·612d·6578·7061·6e64·6564·3d22·6661·6c73··a-expanded="fals | |||
| 0003b1b0:·6522·2074·6974·6c65·3d22·4163·7469·7661··e"·title="Activa | |||
| 0003b1c0:·7465·2074·6f20·7265·7665·616c·2220·6872··te·to·reveal"·hr | |||
| 0003b1d0:·6566·3d22·2321·223e·5265·6d65·6469·6174··ef="#!">Remediat | |||
| 0003b1e0:·696f·6e20·416e·7369·626c·6520·736e·6970··ion·Ansible·snip | |||
| 0003b1f0:·7065·7420·e287·b23c·2f61·3e3c·6272·3e3c··pet·...</a><br>< | |||
| 0003b200:·6469·7620·636c·6173·733d·2270·616e·656c··div·class="panel | |||
| 0003b210:·2d63·6f6c·6c61·7073·6520·636f·6c6c·6170··-collapse·collap | |||
| 0003b220:·7365·2220·6964·3d22·6964·6d36·3333·3322··se"·id="idm6333" | |||
| 0003b230:·3e3c·7461·626c·6520·636c·6173·733d·2274··><table·class="t | |||
| 0003b240:·6162·6c65·2074·6162·6c65·2d73·7472·6970··able·table-strip | |||
| 0003b250:·6564·2074·6162·6c65·2d62·6f72·6465·7265··ed·table-bordere | |||
| 0003b260:·6420·7461·626c·652d·636f·6e64·656e·7365··d·table-condense | |||
| 0003b270:·6422·3e3c·7472·3e3c·7468·3e43·6f6d·706c··d"><tr><th>Compl | |||
| 0003b280:·6578·6974·793a·3c2f·7468·3e3c·7464·3e6c··exity:</th><td>l | |||
| 0003b290:·6f77·3c2f·7464·3e3c·2f74·723e·3c74·723e··ow</td></tr><tr> | |||
| 0003b2a0:·3c74·683e·4469·7372·7570·7469·6f6e·3a3c··<th>Disruption:< | |||
| 0003b2b0:·2f74·683e·3c74·643e·6c6f·773c·2f74·643e··/th><td>low</td> | |||
| 0003b2c0:·3c2f·7472·3e3c·7472·3e3c·7468·3e52·6562··</tr><tr><th>Reb | |||
| 0003b2d0:·6f6f·743a·3c2f·7468·3e3c·7464·3e66·616c··oot:</th><td>fal | |||
| 0003b | 0003b2e0:·7365·3c2f·7464·3e3c·2f74·723e·3c74·723e··se</td></tr><tr> | ||
| 0003b1d0:·626c·653e·3c70·7265·3e3c·636f·6465·3e2d··ble><pre><code>- | |||
| 0003b1e0:·206e·616d·653a·2045·6e73·7572·6520·6169···name:·Ensure·ai | |||
| 0003b1f0:·6465·2069·7320·696e·7374·616c·6c65·640a··de·is·installed. | |||
| 0003b200:·2020·7061·636b·6167·653a·0a20·2020·206e····package:.····n | |||
| 0003b210:·616d·653a·2061·6964·650a·2020·2020·7374··ame:·aide.····st | |||
| 0003b220:·6174·653a·2070·7265·7365·6e74·0a20·2077··ate:·present.··w | |||
| 0003b230:·6865·6e3a·2061·6e73·6962·6c65·5f76·6972··hen:·ansible_vir | |||
| 0003b240:·7475·616c·697a·6174·696f·6e5f·7479·7065··tualization_type | |||
| 0003b250:·206e·6f74·2069·6e20·5b22·646f·636b·6572···not·in·["docker | |||
| 0003b260:·222c·2022·6c78·6322·2c20·226f·7065·6e76··",·"lxc",·"openv | |||
| 0003b270:·7a22·2c20·2270·6f64·6d61·6e22·2c20·2263··z",·"podman",·"c | |||
| 0003b280:·6f6e·7461·696e·6572·225d·0a20·2074·6167··ontainer"].··tag | |||
| 0003b290:·733a·0a20·202d·2043·4345·2d38·3332·3839··s:.··-·CCE-83289 | |||
| 0003b2a0:·2d39·0a20·202d·2043·4a49·532d·352e·3130··-9.··-·CJIS-5.10 | |||
| 0003b2b0:·2e31·2e33·0a20·202d·2044·4953·412d·5354··.1.3.··-·DISA-ST | |||
| 0003b2c0:·4947·2d53·4c45·532d·3135·2d30·3130·3431··IG-SLES-15-01041 | |||
| 0003b2d0:·390a·2020·2d20·4e49·5354·2d38·3030·2d35··9.··-·NIST-800-5 | |||
| 0003b2e0:·332d·434d·2d36·2861·290a·2020·2d20·5043··3-CM-6(a).··-·PC | |||
| 0003b2f0:·492d·4453·532d·5265·712d·3131·2e35·0a20··I-DSS-Req-11.5.· | |||
| 0003b300:·202d·2050·4349·2d44·5353·7634·2d31·312e···-·PCI-DSSv4-11. | |||
| 0003b310:·352e·320a·2020·2d20·656e·6162·6c65·5f73··5.2.··-·enable_s | |||
| 0003b320:·7472·6174·6567·790a·2020·2d20·6c6f·775f··trategy.··-·low_ | |||
| 0003b330:·636f·6d70·6c65·7869·7479·0a20·202d·206c··complexity.··-·l | |||
| 0003b340:·6f77·5f64·6973·7275·7074·696f·6e0a·2020··ow_disruption.·· | |||
| 0003b350:·2d20·6d65·6469·756d·5f73·6576·6572·6974··-·medium_severit | |||
| 0003b360:·790a·2020·2d20·6e6f·5f72·6562·6f6f·745f··y.··-·no_reboot_ | |||
| 0003b370:·6e65·6564·6564·0a20·202d·2070·6163·6b61··needed.··-·packa | |||
| 0003b | 0003b2f0:·3c74·683e·5374·7261·7465·6779·3a3c·2f74··<th>Strategy:</t | ||
| 0003b300:·683e·3c74·643e·656e·6162·6c65·3c2f·7464··h><td>enable</td | |||
| 0003b310:·3e3c·2f74·723e·3c2f·7461·626c·653e·3c70··></tr></table><p | |||
| 0003b320:·7265·3e3c·636f·6465·3e2d·206e·616d·653a··re><code>-·name: | |||
| 0003b330:·2045·6e73·7572·6520·6169·6465·2069·7320···Ensure·aide·is· | |||
| 0003b340:·696e·7374·616c·6c65·640a·2020·7061·636b··installed.··pack | |||
| 0003b350:·6167·653a·0a20·2020·206e·616d·653a·2061··age:.····name:·a | |||
| 0003b360:·6964·650a·2020·2020·7374·6174·653a·2070··ide.····state:·p | |||
| 0003b370:·7265·7365·6e74·0a20·2077·6865·6e3a·2061··resent.··when:·a | |||
| 0003b380:·6e73·6962·6c65·5f76·6972·7475·616c·697a··nsible_virtualiz | |||
| 0003b390:·6174·696f·6e5f·7479·7065·206e·6f74·2069··ation_type·not·i | |||
| 0003b3a0:·6e20·5b22·646f·636b·6572·222c·2022·6c78··n·["docker",·"lx | |||
| 0003b3b0:·6322·2c20·226f·7065·6e76·7a22·2c20·2270··c",·"openvz",·"p | |||
| 0003b3c0:·6f64·6d61·6e22·2c20·2263·6f6e·7461·696e··odman",·"contain | |||
| 0003b3d0:·6572·225d·0a20·2074·6167·733a·0a20·202d··er"].··tags:.··- | |||
| 0003b3e0:·2043·4345·2d38·3332·3839·2d39·0a20·202d···CCE-83289-9.··- | |||
| 0003b3f0:·2043·4a49·532d·352e·3130·2e31·2e33·0a20···CJIS-5.10.1.3.· | |||
| 0003b400:·202d·2044·4953·412d·5354·4947·2d53·4c45···-·DISA-STIG-SLE | |||
| 0003b410:·532d·3135·2d30·3130·3431·390a·2020·2d20··S-15-010419.··-· | |||
| 0003b420:·4e49·5354·2d38·3030·2d35·332d·434d·2d36··NIST-800-53-CM-6 | |||
| 0003b430:·2861·290a·2020·2d20·5043·492d·4453·532d··(a).··-·PCI-DSS- | |||
| 0003b440:·5265·712d·3131·2e35·0a20·202d·2050·4349··Req-11.5.··-·PCI | |||
| Max diff block lines reached; 390446/413408 bytes (94.45%) of diff not shown. | |||
| Offset 38, 15 lines modified | Offset 38, 15 lines modified | ||
| 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 | 38 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·DISA·STIG·for·SUSE·Linux·Enterprise·15 |
| 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig | 39 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_stig |
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 | 41 | ····*·cpe:/o:suse:linux_enterprise_desktop:15 |
| 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 | 42 | ····*·cpe:/o:suse:linux_enterprise_server:15 |
| 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 43 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 44 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 45 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 46 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 47 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 48 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 49 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r | 50 | ·········3.·_\x8A_\x8p_\x8p_\x8A_\x8r_\x8m_\x8o_\x8r |
| 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n | 51 | ·········4.·_\x8G_\x8R_\x8U_\x8B_\x82_\x8·_\x8b_\x8o_\x8o_\x8t_\x8l_\x8o_\x8a_\x8d_\x8e_\x8r_\x8·_\x8c_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8a_\x8t_\x8i_\x8o_\x8n |
| 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g | 52 | ·········5.·_\x8C_\x8o_\x8n_\x8f_\x8i_\x8g_\x8u_\x8r_\x8e_\x8·_\x8S_\x8y_\x8s_\x8l_\x8o_\x8g |
| Offset 106, 14 lines modified | Offset 106, 19 lines modified | ||
| 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 | 106 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s·········Req-11.5 |
| 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 | 107 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000445-GPOS-00199 |
| 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 | 108 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d·········SLES-15-010419 |
| 109 | ·············_\x8c_\x8i_\x8s············1.4.1 | 109 | ·············_\x8c_\x8i_\x8s············1.4.1 |
| 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 | 110 | ·············_\x8a_\x8n_\x8s_\x8s_\x8i··········R76,·R79 |
| 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 | 111 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84········11.5.2 |
| 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule | 112 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f········SV-255922r880967_rule |
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 114 | [[packages]] | ||
| 115 | name·=·"aide" | ||
| 116 | version·=·"*" | ||
| 113 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 117 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 114 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 118 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 115 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 119 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 116 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 120 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 117 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 121 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 118 | -·name:·Ensure·aide·is·installed | 122 | -·name:·Ensure·aide·is·installed |
| 119 | ··package: | 123 | ··package: |
| Offset 129, 44 lines modified | Offset 134, 39 lines modified | ||
| 129 | ··-·PCI-DSSv4-11.5.2 | 134 | ··-·PCI-DSSv4-11.5.2 |
| 130 | ··-·enable_strategy | 135 | ··-·enable_strategy |
| 131 | ··-·low_complexity | 136 | ··-·low_complexity |
| 132 | ··-·low_disruption | 137 | ··-·low_disruption |
| 133 | ··-·medium_severity | 138 | ··-·medium_severity |
| 134 | ··-·no_reboot_needed | 139 | ··-·no_reboot_needed |
| 135 | ··-·package_aide_installed | 140 | ··-·package_aide_installed |
| 136 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 137 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 138 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 139 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 140 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 141 | include·install_aide | ||
| 142 | class·install_aide·{ | ||
| 143 | ··package·{·'aide': | ||
| 144 | ····ensure·=>·'installed', | ||
| 145 | ··} | ||
| 146 | } | ||
| 147 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 148 | [[packages]] | ||
| 149 | name·=·"aide" | ||
| 150 | version·=·"*" | ||
| 151 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ | 141 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8S_\x8h_\x8e_\x8l_\x8l_\x8·_\x8s_\x8c_\x8r_\x8i_\x8p_\x8t_\x8·_\x8⇲ |
| 152 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 142 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 153 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 143 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 154 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 144 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 155 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 145 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 156 | #·Remediation·is·applicable·only·in·certain·platforms | 146 | #·Remediation·is·applicable·only·in·certain·platforms |
| 157 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then | 147 | if·[·!·-f·/.dockerenv·]·&&·[·!·-f·/run/.containerenv·];·then |
| 158 | zypper·install·-y·"aide" | 148 | zypper·install·-y·"aide" |
| 159 | else | 149 | else |
| 160 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' | 150 | ····>&2·echo·'Remediation·is·not·applicable,·nothing·was·done' |
| 161 | fi | 151 | fi |
| 152 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 153 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 154 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 155 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 156 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 157 | include·install_aide | ||
| 158 | class·install_aide·{ | ||
| 159 | ··package·{·'aide': | ||
| 160 | ····ensure·=>·'installed', | ||
| 161 | ··} | ||
| 162 | } | ||
| 162 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 163 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·B\x8Bu\x8ui\x8il\x8ld\x8d·a\x8an\x8nd\x8d·T\x8Te\x8es\x8st\x8t·A\x8AI\x8ID\x8DE\x8E·D\x8Da\x8at\x8ta\x8ab\x8ba\x8as\x8se\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 163 | Run·the·following·command·to·generate·a·new·database: | 164 | Run·the·following·command·to·generate·a·new·database: |
| 164 | $·sudo·/usr/bin/aide·--init | 165 | $·sudo·/usr/bin/aide·--init |
| 165 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ | 166 | By·default,·the·database·will·be·written·to·the·file·/var/lib/aide/aide.db.new.·Storing·the·database,·the·configuration·file·/etc/aide.conf,·and·the·binary·/usr/bin/ |
| 166 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database | 167 | aide·(or·hashes·of·these·files),·in·a·secure·location·(such·as·on·read-only·media)·provides·additional·assurance·about·their·integrity.·The·newly-generated·database |
| 167 | can·be·installed·as·follows: | 168 | can·be·installed·as·follows: |
| 168 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db | 169 | $·sudo·cp·/var/lib/aide/aide.db.new·/var/lib/aide/aide.db |
| Offset 10007, 14 lines modified | Offset 10007, 19 lines modified | ||
| 10007 | Severity: ···medium | 10007 | Severity: ···medium |
| 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed | 10008 | Rule·ID:·····xccdf_org.ssgproject.content_rule_vlock_installed |
| 10009 | Identifiers:·CCE-83268-3 | 10009 | Identifiers:·CCE-83268-3 |
| 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 | 10010 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-000056,·CCI-000058,·CCI-000060 |
| 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 | 10011 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000028-GPOS-00009,·SRG-OS-000030-GPOS-00011 |
| 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 | 10012 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLES-15-010110 |
| 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule | 10013 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-234811r622137_rule |
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10015 | [[packages]] | ||
| 10016 | name·=·"kbd" | ||
| 10017 | version·=·"*" | ||
| 10014 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 10018 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 10015 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 10019 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 10016 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 10020 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 10017 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 10021 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 10018 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 10022 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 10019 | -·name:·Ensure·kbd·is·installed | 10023 | -·name:·Ensure·kbd·is·installed |
| 10020 | ··package: | 10024 | ··package: |
| Offset 10026, 44 lines modified | Offset 10031, 39 lines modified | ||
| 10026 | ··-·DISA-STIG-SLES-15-010110 | 10031 | ··-·DISA-STIG-SLES-15-010110 |
| 10027 | ··-·enable_strategy | 10032 | ··-·enable_strategy |
| 10028 | ··-·low_complexity | 10033 | ··-·low_complexity |
| 10029 | ··-·low_disruption | 10034 | ··-·low_disruption |
| 10030 | ··-·medium_severity | 10035 | ··-·medium_severity |
| 10031 | ··-·no_reboot_needed | 10036 | ··-·no_reboot_needed |
| 10032 | ··-·vlock_installed | 10037 | ··-·vlock_installed |
| 10033 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8P_\x8u_\x8p_\x8p_\x8e_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 10034 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | ||
| 10035 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | ||
| 10036 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | ||
| 10037 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | ||
| 10038 | include·install_kbd | ||
| Max diff block lines reached; 46392/52037 bytes (89.15%) of diff not shown. | |||
| Offset 14319, 15 lines modified | Offset 14319, 15 lines modified | ||
| 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | 00037ee0:·4869·7374·6f72·793c·2f68·323e·3c70·3e43··History</h2><p>C | ||
| 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | 00037ef0:·7572·7265·6e74·2076·6572·7369·6f6e·3a20··urrent·version:· | ||
| 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | 00037f00:·3c73·7472·6f6e·673e·302e·312e·3734·3c2f··<strong>0.1.74</ | ||
| 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | 00037f10:·7374·726f·6e67·3e3c·2f70·3e3c·756c·3e3c··strong></p><ul>< | ||
| 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | 00037f20:·6c69·3e3c·7374·726f·6e67·3e64·7261·6674··li><strong>draft | ||
| 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | 00037f30:·3c2f·7374·726f·6e67·3e0a·2020·2020·2020··</strong>.······ | ||
| 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | 00037f40:·2020·2020·2020·2020·2020·2020·2020·2861················(a | ||
| 00037f50:·7320·6f66·2032·3032·3 | 00037f50:·7320·6f66·2032·3032·352d·3031·2d32·3329··s·of·2025-01-23) | ||
| 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | 00037f60:·0a20·2020·2020·2020·2020·2020·2020·2020··.··············· | ||
| 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | 00037f70:·203c·2f6c·693e·3c2f·756c·3e3c·2f64·6976···</li></ul></div | ||
| 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | 00037f80:·3e3c·6832·3e54·6162·6c65·206f·6620·436f··><h2>Table·of·Co | ||
| 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | 00037f90:·6e74·656e·7473·3c2f·6832·3e3c·6f6c·3e3c··ntents</h2><ol>< | ||
| 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | 00037fa0:·6c69·3e3c·6120·6872·6566·3d22·2378·6363··li><a·href="#xcc | ||
| 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | 00037fb0:·6466·5f6f·7267·2e73·7367·7072·6f6a·6563··df_org.ssgprojec | ||
| 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | 00037fc0:·742e·636f·6e74·656e·745f·6772·6f75·705f··t.content_group_ | ||
| Offset 17757, 126 lines modified | Offset 17757, 126 lines modified | ||
| 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | 000455c0:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | ||
| 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | 000455d0:·6d36·3836·2220·7461·6269·6e64·6578·3d22··m686"·tabindex=" | ||
| 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | 000455e0:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | ||
| 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | 000455f0:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | ||
| 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | 00045600:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | ||
| 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | 00045610:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | ||
| 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | 00045620:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | ||
| 00045630:·6469·6174·696f·6e20·4 | 00045630:·6469·6174·696f·6e20·4f53·4275·696c·6420··diation·OSBuild· | ||
| 00045640:·426c·7565·7072·696e·7420·736e·6970·7065··Blueprint·snippe | |||
| 00045650:·7420·e287·b23c·2f61·3e3c·6272·3e3c·6469··t·...</a><br><di | |||
| 00045640:·736e·6970·7065·7420·e287·b23c·2f61·3e3c··snippet·...</a>< | |||
| 00045650:·6272·3e3c·6469·7620·636c·6173·733d·2270··br><div·class="p | |||
| 00045660:·616e·656c·2d63·6f6c·6c61·7073·6520·636f··anel-collapse·co | |||
| 00045670:·6c6c·6170·7365·2220·6964·3d22·6964·6d36··llapse"·id="idm6 | |||
| 00045680:·3836·223e·3c74·6162·6c65·2063·6c61·7373··86"><table·class | |||
| 00045690:·3d22·7461·626c·6520·7461·626c·652d·7374··="table·table-st | |||
| 000456a0:·7269·7065·6420·7461·626c·652d·626f·7264··riped·table-bord | |||
| 000456b0:·6572·6564·2074·6162·6c65·2d63·6f6e·6465··ered·table-conde | |||
| 000456c0:·6e73·6564·223e·3c74·723e·3c74·683e·436f··nsed"><tr><th>Co | |||
| 000456d0:·6d70·6c65·7869·7479·3a3c·2f74·683e·3c74··mplexity:</th><t | |||
| 000456e0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 000456f0:·7472·3e3c·7468·3e44·6973·7275·7074·696f··tr><th>Disruptio | |||
| 00045700:·6e3a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··n:</th><td>low</ | |||
| 00045710:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 00045720:·5265·626f·6f74·3a3c·2f74·683e·3c74·643e··Reboot:</th><td> | |||
| 00045730:·6661·6c73·653c·2f74·643e·3c2f·7472·3e3c··false</td></tr>< | |||
| 00045740:·7472·3e3c·7468·3e53·7472·6174·6567·793a··tr><th>Strategy: | |||
| 00045750:·3c2f·7468·3e3c·7464·3e65·6e61·626c·653c··</th><td>enable< | |||
| 00045760:·2f74·643e·3c2f·7472·3e3c·2f74·6162·6c65··/td></tr></table | |||
| 00045770:·3e3c·7072·653e·3c63·6f64·653e·2d20·6e61··><pre><code>-·na | |||
| 00045780:·6d65·3a20·456e·7375·7265·2070·6f6c·6963··me:·Ensure·polic | |||
| 00045790:·7963·6f72·6575·7469·6c73·2d70·7974·686f··ycoreutils-pytho | |||
| 000457a0:·6e2d·7574·696c·7320·6973·2069·6e73·7461··n-utils·is·insta | |||
| 000457b0:·6c6c·6564·0a20·2070·6163·6b61·6765·3a0a··lled.··package:. | |||
| 000457c0:·2020·2020·6e61·6d65·3a20·706f·6c69·6379······name:·policy | |||
| 000457d0:·636f·7265·7574·696c·732d·7079·7468·6f6e··coreutils-python | |||
| 000457e0:·2d75·7469·6c73·0a20·2020·2073·7461·7465··-utils.····state | |||
| 000457f0:·3a20·7072·6573·656e·740a·2020·7768·656e··:·present.··when | |||
| 00045800:·3a20·616e·7369·626c·655f·7669·7274·7561··:·ansible_virtua | |||
| 00045810:·6c69·7a61·7469·6f6e·5f74·7970·6520·6e6f··lization_type·no | |||
| 00045820:·7420·696e·205b·2264·6f63·6b65·7222·2c20··t·in·["docker",· | |||
| 00045830:·226c·7863·222c·2022·6f70·656e·767a·222c··"lxc",·"openvz", | |||
| 00045840:·2022·706f·646d·616e·222c·2022·636f·6e74···"podman",·"cont | |||
| 00045850:·6169·6e65·7222·5d0a·2020·7461·6773·3a0a··ainer"].··tags:. | |||
| 00045860:·2020·2d20·4343·452d·3934·3039·312d·360a····-·CCE-94091-6. | |||
| 00045870:·2020·2d20·4449·5341·2d53·5449·472d·534c····-·DISA-STIG-SL | |||
| 00045880:·454d·2d30·352d·3635·3432·3230·0a20·202d··EM-05-654220.··- | |||
| 00045890:·2065·6e61·626c·655f·7374·7261·7465·6779···enable_strategy | |||
| 000458a0:·0a20·202d·206c·6f77·5f63·6f6d·706c·6578··.··-·low_complex | |||
| 000458b0:·6974·790a·2020·2d20·6c6f·775f·6469·7372··ity.··-·low_disr | |||
| 000458c0:·7570·7469·6f6e·0a20·202d·206d·6564·6975··uption.··-·mediu | |||
| 000458d0:·6d5f·7365·7665·7269·7479·0a20·202d·206e··m_severity.··-·n | |||
| 000458e0:·6f5f·7265·626f·6f74·5f6e·6565·6465·640a··o_reboot_needed. | |||
| 000458f0:·2020·2d20·7061·636b·6167·655f·706f·6c69····-·package_poli | |||
| 00045900:·6379·636f·7265·7574·696c·732d·7079·7468··cycoreutils-pyth | |||
| 00045910:·6f6e·2d75·7469·6c73·5f69·6e73·7461·6c6c··on-utils_install | |||
| 00045920:·6564·0a3c·2f63·6f64·653e·3c2f·7072·653e··ed.</code></pre> | |||
| 00045930:·3c2f·6469·763e·3c61·2063·6c61·7373·3d22··</div><a·class=" | |||
| 00045940:·6274·6e20·6274·6e2d·7375·6363·6573·7322··btn·btn-success" | |||
| 00045950:·2064·6174·612d·746f·6767·6c65·3d22·636f···data-toggle="co | |||
| 00045960:·6c6c·6170·7365·2220·6461·7461·2d74·6172··llapse"·data-tar | |||
| 00045970:·6765·743d·2223·6964·6d36·3837·2220·7461··get="#idm687"·ta | |||
| 00045980:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | |||
| 00045990:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | |||
| 000459a0:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | |||
| 000459b0:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | |||
| 000459c0:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | |||
| 000459d0:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | |||
| 000459e0:·5075·7070·6574·2073·6e69·7070·6574·20e2··Puppet·snippet·. | |||
| 000459f0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 00045a00:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 00045a10:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 00045a20:·643d·2269·646d·3638·3722·3e3c·7461·626c··d="idm687"><tabl | |||
| 00045 | 00045660:·7620·636c·6173·733d·2270·616e·656c·2d63··v·class="panel-c | ||
| 00045670:·6f6c·6c61·7073·6520·636f·6c6c·6170·7365··ollapse·collapse | |||
| 00045680:·2220·6964·3d22·6964·6d36·3836·223e·3c70··"·id="idm686"><p | |||
| 00045690:·7265·3e3c·636f·6465·3e0a·5b5b·7061·636b··re><code>.[[pack | |||
| 000456a0:·6167·6573·5d5d·0a6e·616d·6520·3d20·2270··ages]].name·=·"p | |||
| 00045a40:·6162·6c65·2d73·7472·6970·6564·2074·6162··able-striped·tab | |||
| 00045a50:·6c65·2d62·6f72·6465·7265·6420·7461·626c··le-bordered·tabl | |||
| 00045a60:·652d·636f·6e64·656e·7365·6422·3e3c·7472··e-condensed"><tr | |||
| 00045a70:·3e3c·7468·3e43·6f6d·706c·6578·6974·793a··><th>Complexity: | |||
| 00045a80:·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f·7464··</th><td>low</td | |||
| 00045a90:·3e3c·2f74·723e·3c74·723e·3c74·683e·4469··></tr><tr><th>Di | |||
| 00045aa0:·7372·7570·7469·6f6e·3a3c·2f74·683e·3c74··sruption:</th><t | |||
| 00045ab0:·643e·6c6f·773c·2f74·643e·3c2f·7472·3e3c··d>low</td></tr>< | |||
| 00045ac0:·7472·3e3c·7468·3e52·6562·6f6f·743a·3c2f··tr><th>Reboot:</ | |||
| 00045ad0:·7468·3e3c·7464·3e66·616c·7365·3c2f·7464··th><td>false</td | |||
| 00045ae0:·3e3c·2f74·723e·3c74·723e·3c74·683e·5374··></tr><tr><th>St | |||
| 00045af0:·7261·7465·6779·3a3c·2f74·683e·3c74·643e··rategy:</th><td> | |||
| 00045b00:·656e·6162·6c65·3c2f·7464·3e3c·2f74·723e··enable</td></tr> | |||
| 00045b10:·3c2f·7461·626c·653e·3c70·7265·3e3c·636f··</table><pre><co | |||
| 00045b20:·6465·3e69·6e63·6c75·6465·2069·6e73·7461··de>include·insta | |||
| 00045b30:·6c6c·5f70·6f6c·6963·7963·6f72·6575·7469··ll_policycoreuti | |||
| 00045b40:·6c73·2d70·7974·686f·6e2d·7574·696c·730a··ls-python-utils. | |||
| 00045b50:·0a63·6c61·7373·2069·6e73·7461·6c6c·5f70··.class·install_p | |||
| 00045 | 000456b0:·6f6c·6963·7963·6f72·6575·7469·6c73·2d70··olicycoreutils-p | ||
| 00045 | 000456c0:·7974·686f·6e2d·7574·696c·7322·0a76·6572··ython-utils".ver | ||
| 00045 | 000456d0:·7369·6f6e·203d·2022·2a22·0a3c·2f63·6f64··sion·=·"*".</cod | ||
| 000456e0:·653e·3c2f·7072·653e·3c2f·6469·763e·3c61··e></pre></div><a | |||
| 000456f0:·2063·6c61·7373·3d22·6274·6e20·6274·6e2d···class="btn·btn- | |||
| 00045700:·7375·6363·6573·7322·2064·6174·612d·746f··success"·data-to | |||
| 00045710:·6767·6c65·3d22·636f·6c6c·6170·7365·2220··ggle="collapse"· | |||
| 00045720:·6461·7461·2d74·6172·6765·743d·2223·6964··data-target="#id | |||
| 00045730:·6d36·3837·2220·7461·6269·6e64·6578·3d22··m687"·tabindex=" | |||
| 00045740:·3022·2072·6f6c·653d·2262·7574·746f·6e22··0"·role="button" | |||
| 00045750:·2061·7269·612d·6578·7061·6e64·6564·3d22···aria-expanded=" | |||
| 00045760:·6661·6c73·6522·2074·6974·6c65·3d22·4163··false"·title="Ac | |||
| 00045770:·7469·7661·7465·2074·6f20·7265·7665·616c··tivate·to·reveal | |||
| 00045780:·2220·6872·6566·3d22·2321·223e·5265·6d65··"·href="#!">Reme | |||
| 00045790:·6469·6174·696f·6e20·416e·7369·626c·6520··diation·Ansible· | |||
| Max diff block lines reached; 32486/49652 bytes (65.43%) of diff not shown. | |||
| Offset 40, 15 lines modified | Offset 40, 15 lines modified | ||
| 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 40 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 41 | ····*·cpe:/o:suse:sle-microos:5.2 | 41 | ····*·cpe:/o:suse:sle-microos:5.2 |
| 42 | ····*·cpe:/o:suse:sle-micro:5.3 | 42 | ····*·cpe:/o:suse:sle-micro:5.3 |
| 43 | ····*·cpe:/o:suse:sle-micro:5.4 | 43 | ····*·cpe:/o:suse:sle-micro:5.4 |
| 44 | ····*·cpe:/o:suse:sle-micro:5.5 | 44 | ····*·cpe:/o:suse:sle-micro:5.5 |
| 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 45 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 46 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 47 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 48 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 49 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 50 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l | 51 | ·········2.·_\x8A_\x8c_\x8c_\x8o_\x8u_\x8n_\x8t_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8c_\x8c_\x8e_\x8s_\x8s_\x8·_\x8C_\x8o_\x8n_\x8t_\x8r_\x8o_\x8l |
| 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x | 52 | ·········3.·_\x8S_\x8E_\x8L_\x8i_\x8n_\x8u_\x8x |
| 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 53 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r | 54 | ·········1.·_\x8S_\x8S_\x8H_\x8·_\x8S_\x8e_\x8r_\x8v_\x8e_\x8r |
| Offset 749, 14 lines modified | Offset 749, 19 lines modified | ||
| 749 | ·············sandbox. | 749 | ·············sandbox. |
| 750 | Severity: ···medium | 750 | Severity: ···medium |
| 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed | 751 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils-python-utils_installed |
| 752 | Identifiers:·CCE-94091-6 | 752 | Identifiers:·CCE-94091-6 |
| 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 | 753 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227 |
| 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 | 754 | References:··_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-654220 |
| 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule | 755 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261467r996808_rule |
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 757 | [[packages]] | ||
| 758 | name·=·"policycoreutils-python-utils" | ||
| 759 | version·=·"*" | ||
| 756 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 760 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 757 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 761 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 758 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 762 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 759 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 763 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 760 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 764 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 761 | -·name:·Ensure·policycoreutils-python-utils·is·installed | 765 | -·name:·Ensure·policycoreutils-python-utils·is·installed |
| 762 | ··package: | 766 | ··package: |
| Offset 780, 19 lines modified | Offset 785, 14 lines modified | ||
| 780 | include·install_policycoreutils-python-utils | 785 | include·install_policycoreutils-python-utils |
| 781 | class·install_policycoreutils-python-utils·{ | 786 | class·install_policycoreutils-python-utils·{ |
| 782 | ··package·{·'policycoreutils-python-utils': | 787 | ··package·{·'policycoreutils-python-utils': |
| 783 | ····ensure·=>·'installed', | 788 | ····ensure·=>·'installed', |
| 784 | ··} | 789 | ··} |
| 785 | } | 790 | } |
| 786 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 787 | [[packages]] | ||
| 788 | name·=·"policycoreutils-python-utils" | ||
| 789 | version·=·"*" | ||
| 790 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·p\x8po\x8ol\x8li\x8ic\x8cy\x8yc\x8co\x8or\x8re\x8eu\x8ut\x8ti\x8il\x8ls\x8s·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 791 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·I\x8In\x8ns\x8st\x8ta\x8al\x8ll\x8l·p\x8po\x8ol\x8li\x8ic\x8cy\x8yc\x8co\x8or\x8re\x8eu\x8ut\x8ti\x8il\x8ls\x8s·P\x8Pa\x8ac\x8ck\x8ka\x8ag\x8ge\x8e·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 791 | The·policycoreutils·package·can·be·installed·with·the·following·command: | 792 | The·policycoreutils·package·can·be·installed·with·the·following·command: |
| 792 | $·sudo·zypper·install·policycoreutils | 793 | $·sudo·zypper·install·policycoreutils |
| 793 | ·············Security-enhanced·Linux·is·a·feature·of·the·Linux·kernel·and·a·number·of·utilities | 794 | ·············Security-enhanced·Linux·is·a·feature·of·the·Linux·kernel·and·a·number·of·utilities |
| 794 | ·············with·enhanced·security·functionality·designed·to·add·mandatory·access·controls·to | 795 | ·············with·enhanced·security·functionality·designed·to·add·mandatory·access·controls·to |
| 795 | ·············Linux.·The·Security-enhanced·Linux·kernel·contains·new·architectural·components | 796 | ·············Linux.·The·Security-enhanced·Linux·kernel·contains·new·architectural·components |
| 796 | ·············originally·developed·to·improve·security·of·the·Flask·operating·system.·These | 797 | ·············originally·developed·to·improve·security·of·the·Flask·operating·system.·These |
| Offset 805, 14 lines modified | Offset 805, 19 lines modified | ||
| 805 | Severity: ···low | 805 | Severity: ···low |
| 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed | 806 | Rule·ID:·····xccdf_org.ssgproject.content_rule_package_policycoreutils_installed |
| 807 | Identifiers:·CCE-94097-3 | 807 | Identifiers:·CCE-94097-3 |
| 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 | 808 | ·············_\x8d_\x8i_\x8s_\x8a····CCI-001084 |
| 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 | 809 | References:··_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000480-GPOS-00227,·SRG-OS-000134-GPOS-00068 |
| 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 | 810 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-431010 |
| 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule | 811 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261368r996548_rule |
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 813 | [[packages]] | ||
| 814 | name·=·"policycoreutils" | ||
| 815 | version·=·"*" | ||
| 812 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 816 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 813 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 817 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 814 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 818 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 815 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 819 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 816 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 820 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 817 | -·name:·Ensure·policycoreutils·is·installed | 821 | -·name:·Ensure·policycoreutils·is·installed |
| 818 | ··package: | 822 | ··package: |
| Offset 836, 19 lines modified | Offset 841, 14 lines modified | ||
| 836 | include·install_policycoreutils | 841 | include·install_policycoreutils |
| 837 | class·install_policycoreutils·{ | 842 | class·install_policycoreutils·{ |
| 838 | ··package·{·'policycoreutils': | 843 | ··package·{·'policycoreutils': |
| 839 | ····ensure·=>·'installed', | 844 | ····ensure·=>·'installed', |
| 840 | ··} | 845 | ··} |
| 841 | } | 846 | } |
| 842 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 843 | [[packages]] | ||
| 844 | name·=·"policycoreutils" | ||
| 845 | version·=·"*" | ||
| 846 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SE\x8EL\x8Li\x8in\x8nu\x8ux\x8x·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 847 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·C\x8Co\x8on\x8nf\x8fi\x8ig\x8gu\x8ur\x8re\x8e·S\x8SE\x8EL\x8Li\x8in\x8nu\x8ux\x8x·P\x8Po\x8ol\x8li\x8ic\x8cy\x8y·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 847 | The·SELinux·targeted·policy·is·appropriate·for·general-purpose·desktops·and·servers,·as·well·as | 848 | The·SELinux·targeted·policy·is·appropriate·for·general-purpose·desktops·and·servers,·as·well·as |
| 848 | systems·in·many·other·roles.·To·configure·the·system·to·use·this·policy,·add·or·correct·the | 849 | systems·in·many·other·roles.·To·configure·the·system·to·use·this·policy,·add·or·correct·the |
| 849 | following·line·in·/etc/selinux/config: | 850 | following·line·in·/etc/selinux/config: |
| 850 | SELINUXTYPE=targeted | 851 | SELINUXTYPE=targeted |
| 851 | Other·policies,·such·as·mls,·provide·additional·security·labeling·and·greater·confinement·but·are | 852 | Other·policies,·such·as·mls,·provide·additional·security·labeling·and·greater·confinement·but·are |
| 852 | not·compatible·with·many·general-purpose·use·cases. | 853 | not·compatible·with·many·general-purpose·use·cases. |
| Offset 16523, 14 lines modified | Offset 16523, 19 lines modified | ||
| 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) | 16523 | ·············_\x8h_\x8i_\x8p_\x8a_\x8a···164.308(a)(1)(ii)(D),·164.308(a)(5)(ii)(C),·164.310(a)(2)(iv),·164.310(d)(2) |
| 16524 | ·····················(iii),·164.312(b) | 16524 | ·····················(iii),·164.312(b) |
| 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 | 16525 | References:··_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s··Req-10.5.3 |
| 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 | 16526 | ·············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g··SRG-OS-000342-GPOS-00133 |
| 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 | 16527 | ·············_\x8p_\x8c_\x8i_\x8d_\x8s_\x8s_\x84·10.3.3 |
| 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 | 16528 | ·············_\x8s_\x8t_\x8i_\x8g_\x8i_\x8d··SLEM-05-653025 |
| 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule | 16529 | ·············_\x8s_\x8t_\x8i_\x8g_\x8r_\x8e_\x8f·SV-261413r996652_rule |
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16531 | [[packages]] | ||
| 16532 | name·=·"audit-audispd-plugins" | ||
| 16533 | version·=·"*" | ||
| 16530 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 16534 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 16531 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 16535 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 16532 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 16536 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 16533 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 16537 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 16534 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable | 16538 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···enable |
| 16535 | -·name:·Ensure·audit-audispd-plugins·is·installed | 16539 | -·name:·Ensure·audit-audispd-plugins·is·installed |
| 16536 | ··package: | 16540 | ··package: |
| Offset 16556, 16 lines modified | Offset 16561, 11 lines modified | ||
| 16556 | include·install_audit-audispd-plugins | 16561 | include·install_audit-audispd-plugins |
| 16557 | class·install_audit-audispd-plugins·{ | 16562 | class·install_audit-audispd-plugins·{ |
| 16558 | ··package·{·'audit-audispd-plugins': | 16563 | ··package·{·'audit-audispd-plugins': |
| 16559 | ····ensure·=>·'installed', | 16564 | ····ensure·=>·'installed', |
| 16560 | ··} | 16565 | ··} |
| 16561 | } | 16566 | } |
| 16562 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 16563 | [[packages]] | ||
| 16564 | name·=·"audit-audispd-plugins" | ||
| Max diff block lines reached; 207/6046 bytes (3.42%) of diff not shown. | |||
| Offset 14290, 15 lines modified | Offset 14290, 15 lines modified | ||
| 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | 00037d10:·2048·6973·746f·7279·3c2f·6832·3e3c·703e···History</h2><p> | ||
| 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | 00037d20:·4375·7272·656e·7420·7665·7273·696f·6e3a··Current·version: | ||
| 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | 00037d30:·203c·7374·726f·6e67·3e30·2e31·2e37·343c···<strong>0.1.74< | ||
| 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | 00037d40:·2f73·7472·6f6e·673e·3c2f·703e·3c75·6c3e··/strong></p><ul> | ||
| 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | 00037d50:·3c6c·693e·3c73·7472·6f6e·673e·6472·6166··<li><strong>draf | ||
| 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | 00037d60:·743c·2f73·7472·6f6e·673e·0a20·2020·2020··t</strong>.····· | ||
| 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | 00037d70:·2020·2020·2020·2020·2020·2020·2020·2028·················( | ||
| 00037d80:·6173·206f·6620·3230·323 | 00037d80:·6173·206f·6620·3230·3235·2d30·312d·3233··as·of·2025-01-23 | ||
| 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | 00037d90:·290a·2020·2020·2020·2020·2020·2020·2020··).·············· | ||
| 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | 00037da0:·2020·3c2f·6c69·3e3c·2f75·6c3e·3c2f·6469····</li></ul></di | ||
| 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | 00037db0:·763e·3c68·323e·5461·626c·6520·6f66·2043··v><h2>Table·of·C | ||
| 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | 00037dc0:·6f6e·7465·6e74·733c·2f68·323e·3c6f·6c3e··ontents</h2><ol> | ||
| 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | 00037dd0:·3c6c·693e·3c61·2068·7265·663d·2223·7863··<li><a·href="#xc | ||
| 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | 00037de0:·6364·665f·6f72·672e·7373·6770·726f·6a65··cdf_org.ssgproje | ||
| 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | 00037df0:·6374·2e63·6f6e·7465·6e74·5f67·726f·7570··ct.content_group | ||
| Offset 19857, 277 lines modified | Offset 19857, 277 lines modified | ||
| 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | 0004d900:·6574·3d22·2369·646d·3837·3135·2220·7461··et="#idm8715"·ta | ||
| 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | 0004d910:·6269·6e64·6578·3d22·3022·2072·6f6c·653d··bindex="0"·role= | ||
| 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | 0004d920:·2262·7574·746f·6e22·2061·7269·612d·6578··"button"·aria-ex | ||
| 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | 0004d930:·7061·6e64·6564·3d22·6661·6c73·6522·2074··panded="false"·t | ||
| 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | 0004d940:·6974·6c65·3d22·4163·7469·7661·7465·2074··itle="Activate·t | ||
| 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | 0004d950:·6f20·7265·7665·616c·2220·6872·6566·3d22··o·reveal"·href=" | ||
| 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | 0004d960:·2321·223e·5265·6d65·6469·6174·696f·6e20··#!">Remediation· | ||
| 0004d970:·416e·7369·626c·6520·736e·6970·7065·7420··Ansible·snippet· | |||
| 0004d980:·e287·b23c·2f61·3e3c·6272·3e3c·6469·7620··...</a><br><div· | |||
| 0004d990:·636c·6173·733d·2270·616e·656c·2d63·6f6c··class="panel-col | |||
| 0004d9a0:·6c61·7073·6520·636f·6c6c·6170·7365·2220··lapse·collapse"· | |||
| 0004d9b0:·6964·3d22·6964·6d38·3731·3522·3e3c·7461··id="idm8715"><ta | |||
| 0004d9c0:·626c·6520·636c·6173·733d·2274·6162·6c65··ble·class="table | |||
| 0004d9d0:·2074·6162·6c65·2d73·7472·6970·6564·2074···table-striped·t | |||
| 0004d9e0:·6162·6c65·2d62·6f72·6465·7265·6420·7461··able-bordered·ta | |||
| 0004d9f0:·626c·652d·636f·6e64·656e·7365·6422·3e3c··ble-condensed">< | |||
| 0004da00:·7472·3e3c·7468·3e43·6f6d·706c·6578·6974··tr><th>Complexit | |||
| 0004da10:·793a·3c2f·7468·3e3c·7464·3e6c·6f77·3c2f··y:</th><td>low</ | |||
| 0004da20:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da30:·4469·7372·7570·7469·6f6e·3a3c·2f74·683e··Disruption:</th> | |||
| 0004da40:·3c74·643e·6c6f·773c·2f74·643e·3c2f·7472··<td>low</td></tr | |||
| 0004da50:·3e3c·7472·3e3c·7468·3e52·6562·6f6f·743a··><tr><th>Reboot: | |||
| 0004da60:·3c2f·7468·3e3c·7464·3e66·616c·7365·3c2f··</th><td>false</ | |||
| 0004da70:·7464·3e3c·2f74·723e·3c74·723e·3c74·683e··td></tr><tr><th> | |||
| 0004da80:·5374·7261·7465·6779·3a3c·2f74·683e·3c74··Strategy:</th><t | |||
| 0004da90:·643e·6469·7361·626c·653c·2f74·643e·3c2f··d>disable</td></ | |||
| 0004daa0:·7472·3e3c·2f74·6162·6c65·3e3c·7072·653e··tr></table><pre> | |||
| 0004dab0:·3c63·6f64·653e·2d20·6e61·6d65·3a20·4761··<code>-·name:·Ga | |||
| 0004dac0:·7468·6572·2074·6865·2070·6163·6b61·6765··ther·the·package | |||
| 0004dad0:·2066·6163·7473·0a20·2070·6163·6b61·6765···facts.··package | |||
| 0004dae0:·5f66·6163·7473·3a0a·2020·2020·6d61·6e61··_facts:.····mana | |||
| 0004daf0:·6765·723a·2061·7574·6f0a·2020·7461·6773··ger:·auto.··tags | |||
| 0004db00:·3a0a·2020·2d20·4e49·5354·2d38·3030·2d31··:.··-·NIST-800-1 | |||
| 0004db10:·3731·2d33·2e34·2e36·0a20·202d·204e·4953··71-3.4.6.··-·NIS | |||
| 0004d | 0004d970:·4f53·4275·696c·6420·426c·7565·7072·696e··OSBuild·Blueprin | ||
| 0004d980:·7420·736e·6970·7065·7420·e287·b23c·2f61··t·snippet·...</a | |||
| 0004d990:·3e3c·6272·3e3c·6469·7620·636c·6173·733d··><br><div·class= | |||
| 0004d9a0:·2270·616e·656c·2d63·6f6c·6c61·7073·6520··"panel-collapse· | |||
| 0004d9b0:·636f·6c6c·6170·7365·2220·6964·3d22·6964··collapse"·id="id | |||
| 0004d9c0:·6d38·3731·3522·3e3c·7072·653e·3c63·6f64··m8715"><pre><cod | |||
| 0004d9d0:·653e·0a5b·6375·7374·6f6d·697a·6174·696f··e>.[customizatio | |||
| 0004d9e0:·6e73·2e73·6572·7669·6365·735d·0a6d·6173··ns.services].mas | |||
| 0004d9f0:·6b65·6420·3d20·5b22·6175·746f·6673·225d··ked·=·["autofs"] | |||
| 0004da00:·0a3c·2f63·6f64·653e·3c2f·7072·653e·3c2f··.</code></pre></ | |||
| 0004da10:·6469·763e·3c61·2063·6c61·7373·3d22·6274··div><a·class="bt | |||
| 0004da20:·6e20·6274·6e2d·7375·6363·6573·7322·2064··n·btn-success"·d | |||
| 0004da30:·6174·612d·746f·6767·6c65·3d22·636f·6c6c··ata-toggle="coll | |||
| 0004da40:·6170·7365·2220·6461·7461·2d74·6172·6765··apse"·data-targe | |||
| 0004da50:·743d·2223·6964·6d38·3731·3622·2074·6162··t="#idm8716"·tab | |||
| 0004da60:·696e·6465·783d·2230·2220·726f·6c65·3d22··index="0"·role=" | |||
| 0004da70:·6275·7474·6f6e·2220·6172·6961·2d65·7870··button"·aria-exp | |||
| 0004da80:·616e·6465·643d·2266·616c·7365·2220·7469··anded="false"·ti | |||
| 0004da90:·746c·653d·2241·6374·6976·6174·6520·746f··tle="Activate·to | |||
| 0004daa0:·2072·6576·6561·6c22·2068·7265·663d·2223···reveal"·href="# | |||
| 0004dab0:·2122·3e52·656d·6564·6961·7469·6f6e·2041··!">Remediation·A | |||
| 0004dac0:·6e73·6962·6c65·2073·6e69·7070·6574·20e2··nsible·snippet·. | |||
| 0004dad0:·87b2·3c2f·613e·3c62·723e·3c64·6976·2063··..</a><br><div·c | |||
| 0004dae0:·6c61·7373·3d22·7061·6e65·6c2d·636f·6c6c··lass="panel-coll | |||
| 0004daf0:·6170·7365·2063·6f6c·6c61·7073·6522·2069··apse·collapse"·i | |||
| 0004db00:·643d·2269·646d·3837·3136·223e·3c74·6162··d="idm8716"><tab | |||
| 0004db10:·6c65·2063·6c61·7373·3d22·7461·626c·6520··le·class="table· | |||
| 0004db20:·7461·626c·652d·7374·7269·7065·6420·7461··table-striped·ta | |||
| 0004db30:·626c·652d·626f·7264·6572·6564·2074·6162··ble-bordered·tab | |||
| 0004db40:·6c65·2d63·6f6e·6465·6e73·6564·223e·3c74··le-condensed"><t | |||
| 0004db50:·723e·3c74·683e·436f·6d70·6c65·7869·7479··r><th>Complexity | |||
| 0004db60:·3a3c·2f74·683e·3c74·643e·6c6f·773c·2f74··:</th><td>low</t | |||
| 0004db70:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e44··d></tr><tr><th>D | |||
| 0004db80:·6973·7275·7074·696f·6e3a·3c2f·7468·3e3c··isruption:</th>< | |||
| 0004db90:·7464·3e6c·6f77·3c2f·7464·3e3c·2f74·723e··td>low</td></tr> | |||
| 0004dba0:·3c74·723e·3c74·683e·5265·626f·6f74·3a3c··<tr><th>Reboot:< | |||
| 0004dbb0:·2f74·683e·3c74·643e·6661·6c73·653c·2f74··/th><td>false</t | |||
| 0004dbc0:·643e·3c2f·7472·3e3c·7472·3e3c·7468·3e53··d></tr><tr><th>S | |||
| 0004dbd0:·7472·6174·6567·793a·3c2f·7468·3e3c·7464··trategy:</th><td | |||
| 0004dbe0:·3e64·6973·6162·6c65·3c2f·7464·3e3c·2f74··>disable</td></t | |||
| 0004dbf0:·723e·3c2f·7461·626c·653e·3c70·7265·3e3c··r></table><pre>< | |||
| 0004dc00:·636f·6465·3e2d·206e·616d·653a·2047·6174··code>-·name:·Gat | |||
| 0004dc10:·6865·7220·7468·6520·7061·636b·6167·6520··her·the·package· | |||
| 0004dc20:·6661·6374·730a·2020·7061·636b·6167·655f··facts.··package_ | |||
| 0004dc30:·6661·6374·733a·0a20·2020·206d·616e·6167··facts:.····manag | |||
| 0004dc40:·6572·3a20·6175·746f·0a20·2074·6167·733a··er:·auto.··tags: | |||
| 0004d | 0004dc50:·0a20·202d·204e·4953·542d·3830·302d·3137··.··-·NIST-800-17 | ||
| 0004db40:·2d43·4d2d·3728·6129·0a20·202d·204e·4953··-CM-7(a).··-·NIS | |||
| 0004db50:·542d·3830·302d·3533·2d43·4d2d·3728·6229··T-800-53-CM-7(b) | |||
| 0004db60:·0a20·202d·204e·4953·542d·3830·302d·3533··.··-·NIST-800-53 | |||
| 0004db70:·2d4d·502d·370a·2020·2d20·6469·7361·626c··-MP-7.··-·disabl | |||
| 0004db80:·655f·7374·7261·7465·6779·0a20·202d·206c··e_strategy.··-·l | |||
| 0004db90:·6f77·5f63·6f6d·706c·6578·6974·790a·2020··ow_complexity.·· | |||
| 0004dba0:·2d20·6c6f·775f·6469·7372·7570·7469·6f6e··-·low_disruption | |||
| 0004dbb0:·0a20·202d·206d·6564·6975·6d5f·7365·7665··.··-·medium_seve | |||
| 0004dbc0:·7269·7479·0a20·202d·206e·6f5f·7265·626f··rity.··-·no_rebo | |||
| 0004dbd0:·6f74·5f6e·6565·6465·640a·2020·2d20·7365··ot_needed.··-·se | |||
| 0004dbe0:·7276·6963·655f·6175·746f·6673·5f64·6973··rvice_autofs_dis | |||
| 0004dbf0:·6162·6c65·640a·0a2d·206e·616d·653a·2044··abled..-·name:·D | |||
| 0004dc00:·6973·6162·6c65·2074·6865·2041·7574·6f6d··isable·the·Autom | |||
| 0004dc10:·6f75·6e74·6572·202d·2043·6f6c·6c65·6374··ounter·-·Collect | |||
| 0004dc20:·2073·7973·7465·6d64·2053·6572·7669·6365···systemd·Service | |||
| 0004dc30:·7320·5072·6573·656e·7420·696e·2074·6865··s·Present·in·the | |||
| 0004dc40:·2053·7973·7465·6d0a·2020·616e·7369·626c···System.··ansibl | |||
| 0004dc50:·652e·6275·696c·7469·6e2e·636f·6d6d·616e··e.builtin.comman | |||
| 0004dc60:·643a·2073·7973·7465·6d63·746c·202d·7120··d:·systemctl·-q· | |||
| 0004dc70:·6c69·7374·2d75·6e69·742d·6669·6c65·7320··list-unit-files· | |||
| 0004dc80:·2d2d·7479·7065·2073·6572·7669·6365·0a20··--type·service.· | |||
| 0004dc90:·2072·6567·6973·7465·723a·2073·6572·7669···register:·servi | |||
| 0004dca0:·6365·5f65·7869·7374·730a·2020·6368·616e··ce_exists.··chan | |||
| 0004dcb0:·6765·645f·7768·656e·3a20·6661·6c73·650a··ged_when:·false. | |||
| 0004dcc0:·2020·6661·696c·6564·5f77·6865·6e3a·2073····failed_when:·s | |||
| 0004dcd0:·6572·7669·6365·5f65·7869·7374·732e·7263··ervice_exists.rc | |||
| 0004dce0:·206e·6f74·2069·6e20·5b30·2c20·315d·0a20···not·in·[0,·1].· | |||
| 0004dcf0:·2063·6865·636b·5f6d·6f64·653a·2066·616c···check_mode:·fal | |||
| 0004dd00:·7365·0a20·2077·6865·6e3a·2028·2061·6e73··se.··when:·(·ans | |||
| 0004dd10:·6962·6c65·5f76·6972·7475·616c·697a·6174··ible_virtualizat | |||
| Max diff block lines reached; 190332/228336 bytes (83.36%) of diff not shown. | |||
| Offset 39, 15 lines modified | Offset 39, 15 lines modified | ||
| 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* | 39 | *\x8**\x8**\x8**\x8**\x8*·P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8In\x8nf\x8fo\x8or\x8rm\x8ma\x8at\x8ti\x8io\x8on\x8n·*\x8**\x8**\x8**\x8**\x8* |
| 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 | 40 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·T\x8Ti\x8it\x8tl\x8le\x8e·Standard·System·Security·Profile·for·UnionTech·OS·Server·20 |
| 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard | 41 | P\x8Pr\x8ro\x8of\x8fi\x8il\x8le\x8e·I\x8ID\x8D····xccdf_org.ssgproject.content_profile_standard |
| 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* | 42 | *\x8**\x8**\x8*·C\x8CP\x8PE\x8E·P\x8Pl\x8la\x8at\x8tf\x8fo\x8or\x8rm\x8ms\x8s·*\x8**\x8**\x8* |
| 43 | ····*·cpe:/o:uos:uniontech_os_server:20 | 43 | ····*·cpe:/o:uos:uniontech_os_server:20 |
| 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* | 44 | *\x8**\x8**\x8**\x8**\x8*·R\x8Re\x8ev\x8vi\x8is\x8si\x8io\x8on\x8n·H\x8Hi\x8is\x8st\x8to\x8or\x8ry\x8y·*\x8**\x8**\x8**\x8**\x8* |
| 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 | 45 | Current·version:·0\x80.\x8.1\x81.\x8.7\x874\x84 |
| 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·202 | 46 | ····*·d\x8dr\x8ra\x8af\x8ft\x8t·(as·of·2025-01-23) |
| 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* | 47 | *\x8**\x8**\x8**\x8**\x8*·T\x8Ta\x8ab\x8bl\x8le\x8e·o\x8of\x8f·C\x8Co\x8on\x8nt\x8te\x8en\x8nt\x8ts\x8s·*\x8**\x8**\x8**\x8**\x8* |
| 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s | 48 | ···1.·_\x8S_\x8y_\x8s_\x8t_\x8e_\x8m_\x8·_\x8S_\x8e_\x8t_\x8t_\x8i_\x8n_\x8g_\x8s |
| 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e | 49 | ·········1.·_\x8I_\x8n_\x8s_\x8t_\x8a_\x8l_\x8l_\x8i_\x8n_\x8g_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8i_\x8n_\x8t_\x8a_\x8i_\x8n_\x8i_\x8n_\x8g_\x8·_\x8S_\x8o_\x8f_\x8t_\x8w_\x8a_\x8r_\x8e |
| 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s | 50 | ·········2.·_\x8F_\x8i_\x8l_\x8e_\x8·_\x8P_\x8e_\x8r_\x8m_\x8i_\x8s_\x8s_\x8i_\x8o_\x8n_\x8s_\x8·_\x8a_\x8n_\x8d_\x8·_\x8M_\x8a_\x8s_\x8k_\x8s |
| 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 51 | ···2.·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s | 52 | ·········1.·_\x8B_\x8a_\x8s_\x8e_\x8·_\x8S_\x8e_\x8r_\x8v_\x8i_\x8c_\x8e_\x8s |
| 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s | 53 | ·········2.·_\x8C_\x8r_\x8o_\x8n_\x8·_\x8a_\x8n_\x8d_\x8·_\x8A_\x8t_\x8·_\x8D_\x8a_\x8e_\x8m_\x8o_\x8n_\x8s |
| Offset 991, 14 lines modified | Offset 991, 18 lines modified | ||
| 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, | 991 | ···························A.11.2.6,·A.13.1.1,·A.13.2.1,·A.18.1.4,·A.6.2.1,·A.6.2.2, |
| 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, | 992 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.7.1.1,·A.9.2.1,·A.9.2.2,·A.9.2.3,·A.9.2.4,·A.9.2.6, |
| 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 | 993 | ···························A.9.3.1,·A.9.4.2,·A.9.4.3 |
| 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 | 994 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a),·MP-7 |
| 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 | 995 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-1,·PR.AC-3,·PR.AC-6,·PR.AC-7 |
| 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- | 996 | ············_\x8o_\x8s_\x8-_\x8s_\x8r_\x8g·········SRG-OS-000114-GPOS-00059,·SRG-OS-000378-GPOS-00163,·SRG- |
| 997 | ···························OS-000480-GPOS-00227 | 997 | ···························OS-000480-GPOS-00227 |
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 999 | [customizations.services] | ||
| 1000 | masked·=·["autofs"] | ||
| 998 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1001 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 999 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1002 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1000 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1003 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1001 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1004 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1002 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1005 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1003 | -·name:·Gather·the·package·facts | 1006 | -·name:·Gather·the·package·facts |
| 1004 | ··package_facts: | 1007 | ··package_facts: |
| Offset 1114, 18 lines modified | Offset 1118, 14 lines modified | ||
| 1114 | class·disable_autofs·{ | 1118 | class·disable_autofs·{ |
| 1115 | ··service·{'autofs': | 1119 | ··service·{'autofs': |
| 1116 | ····enable·=>·false, | 1120 | ····enable·=>·false, |
| 1117 | ····ensure·=>·'stopped', | 1121 | ····ensure·=>·'stopped', |
| 1118 | ··} | 1122 | ··} |
| 1119 | } | 1123 | } |
| 1120 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1121 | [customizations.services] | ||
| 1122 | masked·=·["autofs"] | ||
| 1123 | Group ·Services· Group·contains·2·groups·and·6·rules | 1124 | Group ·Services· Group·contains·2·groups·and·6·rules |
| 1124 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·best·protection·against·vulnerable·software·is·running·less·software. | 1125 | _\x8[_\x8r_\x8e_\x8f_\x8] ·The·best·protection·against·vulnerable·software·is·running·less·software. |
| 1125 | This·section·describes·how·to·review·the·software·which·UnionTech·OS·Server·20 | 1126 | This·section·describes·how·to·review·the·software·which·UnionTech·OS·Server·20 |
| 1126 | installs·on·a·system·and·disable·software·which·is·not·needed.·It·then·enumerates | 1127 | installs·on·a·system·and·disable·software·which·is·not·needed.·It·then·enumerates |
| 1127 | the·software·packages·installed·on·a·default·UnionTech·OS·Server·20·system·and | 1128 | the·software·packages·installed·on·a·default·UnionTech·OS·Server·20·system·and |
| 1128 | provides·guidance·about·which·ones·can·be·safely·disabled. | 1129 | provides·guidance·about·which·ones·can·be·safely·disabled. |
| Offset 1166, 14 lines modified | Offset 1166, 18 lines modified | ||
| 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1166 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1167 | ···························5.3,·SR·7.1,·SR·7.6 | 1167 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1168 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1169 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1170 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) | 1171 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-6(a) |
| 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1172 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1174 | [customizations.services] | ||
| 1175 | masked·=·["abrtd"] | ||
| 1173 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1176 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1174 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1177 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1175 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1178 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1176 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1179 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1177 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1180 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1178 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services | 1181 | -·name:·Disable·Automatic·Bug·Reporting·Tool·(abrtd)·-·Collect·systemd·Services |
| 1179 | Present | 1182 | Present |
| Offset 1262, 18 lines modified | Offset 1266, 14 lines modified | ||
| 1262 | class·disable_abrtd·{ | 1266 | class·disable_abrtd·{ |
| 1263 | ··service·{'abrtd': | 1267 | ··service·{'abrtd': |
| 1264 | ····enable·=>·false, | 1268 | ····enable·=>·false, |
| 1265 | ····ensure·=>·'stopped', | 1269 | ····ensure·=>·'stopped', |
| 1266 | ··} | 1270 | ··} |
| 1267 | } | 1271 | } |
| 1268 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1269 | [customizations.services] | ||
| 1270 | masked·=·["abrtd"] | ||
| 1271 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1272 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e·S\x8Se\x8er\x8rv\x8vi\x8ic\x8ce\x8e·(\x8(n\x8nt\x8tp\x8pd\x8da\x8at\x8te\x8e)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1272 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the | 1273 | The·ntpdate·service·sets·the·local·hardware·clock·by·polling·NTP·servers·when·the |
| 1273 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or | 1274 | system·boots.·It·synchronizes·to·the·NTP·servers·listed·in·/etc/ntp/step-tickers·or |
| 1274 | /etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized | 1275 | /etc/ntp.conf·and·then·sets·the·local·hardware·clock·to·the·newly·synchronized |
| 1275 | system·time.·The·ntpdate·service·can·be·disabled·with·the·following·command: | 1276 | system·time.·The·ntpdate·service·can·be·disabled·with·the·following·command: |
| 1276 | $·sudo·systemctl·mask·--now·ntpdate.service | 1277 | $·sudo·systemctl·mask·--now·ntpdate.service |
| 1277 | ············The·ntpdate·service·may·only·be·suitable·for·systems·which·are·rebooted | 1278 | ············The·ntpdate·service·may·only·be·suitable·for·systems·which·are·rebooted |
| Offset 1297, 14 lines modified | Offset 1297, 18 lines modified | ||
| 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR | 1297 | ···························3.1,·SR·3.5,·SR·3.8,·SR·4.1,·SR·4.3,·SR·5.1,·SR·5.2,·SR |
| 1298 | ···························5.3,·SR·7.1,·SR·7.6 | 1298 | ···························5.3,·SR·7.1,·SR·7.6 |
| 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, | 1299 | ···························A.11.2.6,·A.12.1.2,·A.12.5.1,·A.12.6.2,·A.13.1.1, |
| 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, | 1300 | ············_\x8i_\x8s_\x8o_\x82_\x87_\x80_\x80_\x81_\x8-_\x82_\x80_\x81_\x83··A.13.2.1,·A.14.1.3,·A.14.2.2,·A.14.2.3,·A.14.2.4, |
| 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 | 1301 | ···························A.6.2.1,·A.6.2.2,·A.9.1.2 |
| 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) | 1302 | ············_\x8n_\x8i_\x8s_\x8t···········CM-7(a),·CM-7(b),·CM-6(a) |
| 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 | 1303 | ············_\x8n_\x8i_\x8s_\x8t_\x8-_\x8c_\x8s_\x8f·······PR.AC-3,·PR.IP-1,·PR.PT-3,·PR.PT-4 |
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1305 | [customizations.services] | ||
| 1306 | masked·=·["ntpdate"] | ||
| 1304 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | 1307 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8A_\x8n_\x8s_\x8i_\x8b_\x8l_\x8e_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ |
| 1305 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low | 1308 | C\x8Co\x8om\x8mp\x8pl\x8le\x8ex\x8xi\x8it\x8ty\x8y:\x8:·low |
| 1306 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low | 1309 | D\x8Di\x8is\x8sr\x8ru\x8up\x8pt\x8ti\x8io\x8on\x8n:\x8:·low |
| 1307 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false | 1310 | R\x8Re\x8eb\x8bo\x8oo\x8ot\x8t:\x8:·····false |
| 1308 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable | 1311 | S\x8St\x8tr\x8ra\x8at\x8te\x8eg\x8gy\x8y:\x8:···disable |
| 1309 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the | 1312 | -·name:·Disable·ntpdate·Service·(ntpdate)·-·Collect·systemd·Services·Present·in·the |
| 1310 | ····System | 1313 | ····System |
| Offset 1395, 18 lines modified | Offset 1399, 14 lines modified | ||
| 1395 | class·disable_ntpdate·{ | 1399 | class·disable_ntpdate·{ |
| 1396 | ··service·{'ntpdate': | 1400 | ··service·{'ntpdate': |
| 1397 | ····enable·=>·false, | 1401 | ····enable·=>·false, |
| 1398 | ····ensure·=>·'stopped', | 1402 | ····ensure·=>·'stopped', |
| 1399 | ··} | 1403 | ··} |
| 1400 | } | 1404 | } |
| 1401 | _\x8R_\x8e_\x8m_\x8e_\x8d_\x8i_\x8a_\x8t_\x8i_\x8o_\x8n_\x8·_\x8O_\x8S_\x8B_\x8u_\x8i_\x8l_\x8d_\x8·_\x8B_\x8l_\x8u_\x8e_\x8p_\x8r_\x8i_\x8n_\x8t_\x8·_\x8s_\x8n_\x8i_\x8p_\x8p_\x8e_\x8t_\x8·_\x8⇲ | ||
| 1402 | [customizations.services] | ||
| 1403 | masked·=·["ntpdate"] | ||
| 1404 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·O\x8Od\x8dd\x8d·J\x8Jo\x8ob\x8b·D\x8Da\x8ae\x8em\x8mo\x8on\x8n·(\x8(o\x8od\x8dd\x8dj\x8jo\x8ob\x8bd\x8d)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* | 1405 | *\x8**\x8**\x8*·R\x8Ru\x8ul\x8le\x8e?\x8 ?\x8 ·D\x8Di\x8is\x8sa\x8ab\x8bl\x8le\x8e·O\x8Od\x8dd\x8d·J\x8Jo\x8ob\x8b·D\x8Da\x8ae\x8em\x8mo\x8on\x8n·(\x8(o\x8od\x8dd\x8dj\x8jo\x8ob\x8bd\x8d)\x8)·?\x8 ?\x8 _\x8[\x8[_\x8r\x8r_\x8e\x8e_\x8f\x8f_\x8]\x8]·*\x8**\x8**\x8* |
| 1405 | The·oddjobd·service·exists·to·provide·an·interface·and·access·control·mechanism | 1406 | The·oddjobd·service·exists·to·provide·an·interface·and·access·control·mechanism |
| 1406 | through·which·specified·privileged·tasks·can·run·tasks·for·unprivileged·client | 1407 | through·which·specified·privileged·tasks·can·run·tasks·for·unprivileged·client |
| 1407 | applications.·Communication·with·oddjobd·through·the·system·message·bus.·The | 1408 | applications.·Communication·with·oddjobd·through·the·system·message·bus.·The |
| 1408 | oddjobd·service·can·be·disabled·with·the·following·command: | 1409 | oddjobd·service·can·be·disabled·with·the·following·command: |
| Max diff block lines reached; 7811/14456 bytes (54.03%) of diff not shown. | |||
| Offset 63, 273 lines modified | Offset 63, 273 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d45·5020··<td>Ensure·SMEP· | |||
| 00000450:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000460:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000470:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000480:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000490:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 000004a0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 000004b0:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| 000004c0:·6c6c·6174·696f·6e20·6f66·2036·342d·6269··llation·of·64-bi | |||
| 000004d0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 000004e0:·656d·7320·7768·656e·2074·6865·2043·5055··ems·when·the·CPU | |||
| 000004f0:·2073·7570·706f·7274·7320·6974·2e0a·2020···supports·it..·· | |||
| 00000500:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000510:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000520:·2d55·5322·3e0a·2020·2020·2020·2020·5573··-US">.········Us | |||
| 00000530:·6520·6f66·2061·2036·342d·6269·7420·6f70··e·of·a·64-bit·op | |||
| 00000540:·6572·6174·696e·6720·7379·7374·656d·206f··erating·system·o | |||
| 00000550:·6666·6572·7320·6120·6665·7720·6164·7661··ffers·a·few·adva | |||
| 00000560:·6e74·6167·6573·2c20·6c69·6b65·2061·206c··ntages,·like·a·l | |||
| 00000570:·6172·6765·7220·6164·6472·6573·7320·7370··arger·address·sp | |||
| 00000580:·6163·6520·7261·6e67·6520·666f·720a·4164··ace·range·for.Ad | |||
| 00000590:·6472·6573·7320·5370·6163·6520·4c61·796f··dress·Space·Layo | |||
| 000005a0:·7574·2052·616e·646f·6d69·7a61·7469·6f6e··ut·Randomization | |||
| 000005b0:·2028·4153·4c52·2920·616e·6420·7379·7374···(ASLR)·and·syst | |||
| 000005c0:·656d·6174·6963·2070·7265·7365·6e63·6520··ematic·presence· | |||
| 000005d0:·6f66·204e·6f20·6558·6563·7574·6520·616e··of·No·eXecute·an | |||
| 000005e0:·6420·4578·6563·7574·6520·4469·7361·626c··d·Execute·Disabl | |||
| 000005f0:·6520·284e·582f·5844·2920·7072·6f74·6563··e·(NX/XD)·protec | |||
| 00000600:·7469·6f6e·2062·6974·732e·0a20·2020·2020··tion·bits..····· | |||
| 00000610:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00000620:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 00000630:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | |||
| 00000640:·2020·3c74·643e·496e·7374·616c·6c20·5041····<td>Install·PA | |||
| 00000650:·4520·4b65·726e·656c·206f·6e20·5375·7070··E·Kernel·on·Supp | |||
| 00000660:·6f72·7465·6420·3332·2d62·6974·2078·3836··orted·32-bit·x86 | |||
| 00000670:·2053·7973·7465·6d73·3c2f·7464·3e0a·2020···Systems</td>.·· | |||
| 00000680:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000690:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 000006a0:·2020·5379·7374·656d·7320·7468·6174·2061····Systems·that·a | |||
| 000006b0:·7265·2075·7369·6e67·2074·6865·2036·342d··re·using·the·64- | |||
| 000006c0:·6269·7420·7838·3620·6b65·726e·656c·2070··bit·x86·kernel·p | |||
| 000006d0:·6163·6b61·6765·0a64·6f20·6e6f·7420·6e65··ackage.do·not·ne | |||
| 000006e0:·6564·2074·6f20·696e·7374·616c·6c20·7468··ed·to·install·th | |||
| 000006f0:·6520·6b65·726e·656c·2d50·4145·2070·6163··e·kernel-PAE·pac | |||
| 00000700:·6b61·6765·2062·6563·6175·7365·2074·6865··kage·because·the | |||
| 00000710:·2036·342d·6269·740a·7838·3620·6b65·726e···64-bit.x86·kern | |||
| 00000720:·656c·2061·6c72·6561·6479·2069·6e63·6c75··el·already·inclu | |||
| 00000730:·6465·7320·7468·6973·2073·7570·706f·7274··des·this·support | |||
| 00000740:·2e20·486f·7765·7665·722c·2069·6620·7468··.·However,·if·th | |||
| 00000750:·6520·7379·7374·656d·2069·730a·3332·2d62··e·system·is.32-b | |||
| 00000760:·6974·2061·6e64·2061·6c73·6f20·7375·7070··it·and·also·supp | |||
| 00000770:·6f72·7473·2074·6865·2050·4145·2061·6e64··orts·the·PAE·and | |||
| 00000780:·204e·5820·6665·6174·7572·6573·2061·730a···NX·features·as. | |||
| 00000790:·6465·7465·726d·696e·6564·2069·6e20·7468··determined·in·th | |||
| 000007a0:·6520·7072·6576·696f·7573·2073·6563·7469··e·previous·secti | |||
| 000007b0:·6f6e·2c20·7468·6520·6b65·726e·656c·2d50··on,·the·kernel-P | |||
| 000007c0:·4145·2070·6163·6b61·6765·2073·686f·756c··AE·package·shoul | |||
| 000007d0:·640a·6265·2069·6e73·7461·6c6c·6564·2074··d.be·installed·t | |||
| 000007e0:·6f20·656e·6162·6c65·2058·4420·6f72·204e··o·enable·XD·or·N | |||
| 000007f0:·5820·7375·7070·6f72·742e·0a54·6865·203c··X·support..The·< | |||
| 00000800:·636f·6465·3e6b·6572·6e65·6c2d·5041·453c··code>kernel-PAE< | |||
| 00000810:·2f63·6f64·653e·2070·6163·6b61·6765·2063··/code>·package·c | |||
| 00000820:·616e·2062·6520·696e·7374·616c·6c65·6420··an·be·installed· | |||
| 00000830:·7769·7468·2074·6865·2066·6f6c·6c6f·7769··with·the·followi | |||
| 00000840:·6e67·2063·6f6d·6d61·6e64·3a0a·3c70·7265··ng·command:.<pre | |||
| 00000850:·3e0a·2420·7375·646f·2079·756d·2069·6e73··>.$·sudo·yum·ins | |||
| 00000860:·7461·6c6c·206b·6572·6e65·6c2d·5041·453c··tall·kernel-PAE< | |||
| 00000870:·2f70·7265·3e0a·5468·6520·696e·7374·616c··/pre>.The·instal | |||
| 00000880:·6c61·7469·6f6e·2070·726f·6365·7373·2073··lation·process·s | |||
| 00000890:·686f·756c·6420·616c·736f·2068·6176·6520··hould·also·have· | |||
| 000008a0:·636f·6e66·6967·7572·6564·2074·6865·0a62··configured·the.b | |||
| 000008b0:·6f6f·746c·6f61·6465·7220·746f·206c·6f61··ootloader·to·loa | |||
| 000008c0:·6420·7468·6520·6e65·7720·6b65·726e·656c··d·the·new·kernel | |||
| 000008d0:·2061·7420·626f·6f74·2e20·5665·7269·6679···at·boot.·Verify | |||
| 000008e0:·2074·6869·7320·6166·7465·7220·7265·626f···this·after·rebo | |||
| 000008f0:·6f74·0a61·6e64·206d·6f64·6966·7920·3c74··ot.and·modify·<t | |||
| 00000900:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000910:·7275·623c·2f74·743e·2069·6620·6e65·6365··rub</tt>·if·nece | |||
| 00000920:·7373·6172·792e·0a20·2020·2020·203c·2f74··ssary..······</t | |||
| 00000930:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00000940:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00000950:·2020·2020·2020·204f·6e20·3332·2d62·6974·········On·32-bit | |||
| 00000960:·2073·7973·7465·6d73·2074·6861·7420·7375···systems·that·su | |||
| 00000970:·7070·6f72·7420·7468·6520·5844·206f·7220··pport·the·XD·or· | |||
| 00000980:·4e58·2062·6974·2c20·7468·6520·7665·6e64··NX·bit,·the·vend | |||
| 00000990:·6f72·2d73·7570·706c·6965·640a·5041·4520··or-supplied.PAE· | |||
| 000009a0:·6b65·726e·656c·2069·7320·7265·7175·6972··kernel·is·requir | |||
| 000009b0:·6564·2074·6f20·656e·6162·6c65·2065·6974··ed·to·enable·eit | |||
| 000009c0:·6865·7220·4578·6563·7574·6520·4469·7361··her·Execute·Disa | |||
| 000009d0:·626c·6520·2858·4429·206f·7220·4e6f·2045··ble·(XD)·or·No·E | |||
| 000009e0:·7865·6375·7465·2028·4e58·2920·7375·7070··xecute·(NX)·supp | |||
| 000009f0:·6f72·742e·0a20·2020·2020·203c·2f74·643e··ort..······</td> | |||
| 00000a00:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | |||
| 00000a10:·7472·3e0a·2020·2020·2020·3c74·643e·5231··tr>.······<td>R1 | |||
| 00000a20:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | |||
| 00000a30:·496e·7374·616c·6c20·7468·6520·6472·6163··Install·the·drac | |||
| 00000a40:·7574·2d66·6970·732d·6165·736e·6920·5061··ut-fips-aesni·Pa | |||
| 00000a50:·636b·6167·653c·2f74·643e·0a20·2020·2020··ckage</td>.····· | |||
| 00000a60:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000a70:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | |||
| 00000a80:·6f20·656e·6162·6c65·2046·4950·5320·6f6e··o·enable·FIPS·on | |||
| 00000a90:·2073·7973·7465·6d20·7468·6174·2073·7570···system·that·sup | |||
| 00000aa0:·706f·7274·2074·6865·2041·6476·616e·6365··port·the·Advance | |||
| 00000ab0:·6420·456e·6372·7970·7469·6f6e·2053·7461··d·Encryption·Sta | |||
| 00000ac0:·6e64·6172·6420·2841·4553·2920·6f72·204e··ndard·(AES)·or·N | |||
| 00000ad0:·6577·0a49·6e73·7472·7563·7469·6f6e·7320··ew.Instructions· | |||
| 00000ae0:·2841·4553·2d4e·4929·2065·6e67·696e·652c··(AES-NI)·engine, | |||
| 00000af0:·2074·6865·2073·7973·7465·6d20·7265·7175···the·system·requ | |||
| 00000b00:·6972·6573·2074·6861·7420·7468·6520·3c74··ires·that·the·<t | |||
| 00000b10:·743e·6472·6163·7574·2d66·6970·732d·6165··t>dracut-fips-ae | |||
| 00000b20:·736e·693c·2f74·743e·0a70·6163·6b61·6765··sni</tt>.package | |||
| 00000b30:·2062·6520·696e·7374·616c·6c65·642e·0a54···be·installed..T | |||
| 00000b40:·6865·203c·636f·6465·3e64·7261·6375·742d··he·<code>dracut- | |||
| 00000b50:·6669·7073·2d61·6573·6e69·3c2f·636f·6465··fips-aesni</code | |||
| 00000b60:·3e20·7061·636b·6167·6520·6361·6e20·6265··>·package·can·be | |||
| 00000b70:·2069·6e73·7461·6c6c·6564·2077·6974·6820···installed·with· | |||
| 00000b80:·7468·6520·666f·6c6c·6f77·696e·6720·636f··the·following·co | |||
| 00000b90:·6d6d·616e·643a·0a3c·7072·653e·0a24·2073··mmand:.<pre>.$·s | |||
| 00000ba0:·7564·6f20·7975·6d20·696e·7374·616c·6c20··udo·yum·install· | |||
| 00000bb0:·6472·6163·7574·2d66·6970·732d·6165·736e··dracut-fips-aesn | |||
| Max diff block lines reached; 2896260/2932576 bytes (98.76%) of diff not shown. | |||
| Offset 1, 20 lines modified | Offset 1, 28 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 7 | 2 | 7 |
| 3 | ···········································································Use·of·a·64-bit·operating·system | ||
| 4 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 5 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 6 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 7 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 8 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 9 | ······························ | 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 4 | ······························mode·from·executing·user·space·code,·it·is | ||
| 5 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 6 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 7 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 10 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 11 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 12 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 13 | ······························argument·nosmep.·Run·the·following·command | ||
| 14 | ······························to·update·command·line·for·already·installed | ||
| 15 | ······························kernels: | ||
| 16 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 17 | ······························args="nosmep" | ||
| 10 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 18 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 11 | ······························package·do·not·need·to·install·the·kernel- | 19 | ······························package·do·not·need·to·install·the·kernel- |
| 12 | ······························PAE·package·because·the·64-bit·x86·kernel | 20 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 13 | ······························already·includes·this·support.·However,·if | 21 | ······························already·includes·this·support.·However,·if |
| 14 | ······························the·system·is·32-bit·and·also·supports·the | 22 | ······························the·system·is·32-bit·and·also·supports·the |
| 15 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 23 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 16 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 24 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 22, 14 lines modified | Offset 30, 21 lines modified | ||
| 22 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 23 | ······························installed·with·the·following·command:········(NX)·support. | 31 | ······························installed·with·the·following·command:········(NX)·support. |
| 24 | ······························$·sudo·yum·install·kernel-PAE | 32 | ······························$·sudo·yum·install·kernel-PAE |
| 25 | ······························The·installation·process·should·also·have | 33 | ······························The·installation·process·should·also·have |
| 26 | ······························configured·the·bootloader·to·load·the·new | 34 | ······························configured·the·bootloader·to·load·the·new |
| 27 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 28 | ······························modify·/etc/default/grub·if·necessary. | 36 | ······························modify·/etc/default/grub·if·necessary. |
| 37 | ···········································································Use·of·a·64-bit·operating·system | ||
| 38 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 39 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 40 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 41 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 42 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 43 | ···········································································bits. | ||
| 29 | ···········································································Use·of·weak·or·untested·encryption | 44 | ···········································································Use·of·weak·or·untested·encryption |
| 30 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of |
| 31 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 32 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 33 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 34 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 35 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| Offset 47, 29 lines modified | Offset 62, 14 lines modified | ||
| 47 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 48 | ······························within·/etc/default/grub·doesn't·contain·the | 63 | ······························within·/etc/default/grub·doesn't·contain·the |
| 49 | ······························argument·nosmap.·Run·the·following·command | 64 | ······························argument·nosmap.·Run·the·following·command |
| 50 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 51 | ······························kernels: | 66 | ······························kernels: |
| 52 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 53 | ······························args="nosmap" | 68 | ······························args="nosmap" |
| 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 55 | ······························mode·from·executing·user·space·code,·it·is | ||
| 56 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 61 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 64 | ······························argument·nosmep.·Run·the·following·command | ||
| 65 | ······························to·update·command·line·for·already·installed | ||
| 66 | ······························kernels: | ||
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 68 | ······························args="nosmep" | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 133, 45 lines modified | Offset 133, 73 lines modified | ||
| 133 | ······························default/grub·as·shown·below: | 133 | ······························default/grub·as·shown·below: |
| 134 | ······························GRUB_CMDLINE_LINUX="... | 134 | ······························GRUB_CMDLINE_LINUX="... |
| 135 | ······························rng_core.default_quality=500·..." | 135 | ······························rng_core.default_quality=500·..." |
| 136 | ······························Run·the·following·command·to·update·command | 136 | ······························Run·the·following·command·to·update·command |
| 137 | ······························line·for·already·installed·kernels: | 137 | ······························line·for·already·installed·kernels: |
| 138 | ······························#·grubby·--update-kernel=ALL·-- | 138 | ······························#·grubby·--update-kernel=ALL·-- |
| 139 | ······························args="rng_core.default_quality=500" | 139 | ······························args="rng_core.default_quality=500" |
| 140 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 141 | ······························vulnerability·which·allows·unprivileged | ||
| 142 | ······························speculative·access·to·data·which·is | ||
| 143 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 144 | ······························page·table·entry·isn't·present.·Select·the | ||
| 145 | ······························appropriate·mitigation·by·adding·the | ||
| 146 | ······························argument·l1tf=flush·to·the·default·GRUB·2 | ||
| 147 | ······························command·line·for·the·Linux·operating·system. | ||
| 148 | ······························To·ensure·that·l1tf=flush·is·added·as·a······The·L1TF·vulnerability·allows·an | ||
| 149 | ······························kernel·command·line·argument·to·newly········attacker·to·bypass·memory·access | ||
| 150 | ····Configure·L1·Terminal·····installed·kernels,·add·l1tf=flush·to·the·····security·controls·imposed·by·the | ||
| 151 | 140 | ······························Spectre·V2·is·an·indirect·branch·poisoning | |
| 141 | ······························attack·that·can·lead·to·data·leakage.·An | ||
| 142 | ······························exploit·for·Spectre·V2·tricks·the·indirect | ||
| 143 | ······························branch·predictor·into·executing·code·from·a | ||
| 144 | ······························future·indirect·branch·chosen·by·the | ||
| 145 | ······························attacker,·even·if·the·privilege·level·is | ||
| 146 | ······························different.·Since·Linux·Kernel·4.15·you·can | ||
| 147 | ······························check·the·Spectre·V2·mitigation·state·with | ||
| 148 | ······························the·following·command:·cat·/sys/devices/ | ||
| 149 | ······························system/cpu/vulnerabilities/spectre_v2 | ||
| 150 | ······························Enforce·the·Spectre·V2·mitigation·by·adding··The·Spectre·V2·vulnerability·allows·an | ||
| 151 | R8··Enforce·Spectre·v2········the·argument·spectre_v2=on·to·the·default····attacker·to·read·memory·that·he·should | ||
| 152 | ····mitigation················GRUB·2·command·line·for·the·Linux·operating··not·have·access·to. | ||
| 153 | ······························system.·To·ensure·that·spectre_v2=on·is | ||
| 154 | ······························added·as·a·kernel·command·line·argument·to | ||
| 155 | ······························newly·installed·kernels,·add·spectre_v2=on | ||
| 156 | ······························to·the·default·Grub2·command·line·for·Linux | ||
| 152 | ······························operating·systems.·Modify·the·line·within·/ | 157 | ······························operating·systems.·Modify·the·line·within·/ |
| 153 | ······························etc/default/grub·as·shown·below:·············any·physical·memory·location·that·is | ||
| 154 | ······························ | 158 | ······························etc/default/grub·as·shown·below: |
| 159 | ······························GRUB_CMDLINE_LINUX="...·spectre_v2=on·..." | ||
| 155 | ······························Run·the·following·command·to·update·command | 160 | ······························Run·the·following·command·to·update·command |
| Max diff block lines reached; 652612/663340 bytes (98.38%) of diff not shown. | |||
| Offset 61, 48 lines modified | Offset 61, 36 lines modified | ||
| 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 65 | ······</td> |
| 66 | ····</tr> | 66 | ····</tr> |
| 67 | ····<tr> | 67 | ····<tr> |
| 68 | ······<td>3.1.1</td> | ||
| 69 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 72 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 73 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 74 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 76 | <pre>[daemon] | ||
| 77 | AutomaticLoginEnable=false</pre> | ||
| 78 | ······</td> | ||
| 79 | ······<td·xml:lang="en-US"> | ||
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 81 | system·security. | ||
| 82 | ······</td> | ||
| 83 | ····</tr> | ||
| 84 | ····<tr> | ||
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 86 | ······<td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 87 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 88 | ········If·an·account·is·configured·for·password·authentication | ||
| 89 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 90 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 91 | 71 | ········Disallow·SSH·login·with·empty·passwords. | |
| 72 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 73 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 74 | <br·/> | ||
| 75 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 76 | add·or·correct·the·following·line·in | ||
| 92 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 93 | <tt>/etc/pam.d/password-auth</tt> | ||
| 94 | 77 | <tt>/etc/ssh/sshd_config</tt>: | |
| 78 | <br·/> | ||
| 79 | <pre>PermitEmptyPasswords·no</pre> | ||
| 80 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 81 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 95 | ······</td> | 82 | ······</td> |
| 96 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 99 | 84 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | |
| 85 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 86 | misconfiguration·elsewhere. | ||
| 100 | ······</td> | 87 | ······</td> |
| 101 | ····</tr> | 88 | ····</tr> |
| 102 | ····<tr> | 89 | ····<tr> |
| 103 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 104 | ······<td>Restrict·Serial·Port·Root·Logins</td> | 91 | ······<td>Restrict·Serial·Port·Root·Logins</td> |
| 105 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 106 | ········To·restrict·root·logins·on·serial·ports, | 93 | ········To·restrict·root·logins·on·serial·ports, |
| Offset 130, 57 lines modified | Offset 118, 86 lines modified | ||
| 130 | ······</td> | 118 | ······</td> |
| 131 | ······<td·xml:lang="en-US"> | 119 | ······<td·xml:lang="en-US"> |
| 132 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 120 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 133 | system·security. | 121 | system·security. |
| 134 | ······</td> | 122 | ······</td> |
| 135 | ····</tr> | 123 | ····</tr> |
| 136 | ····<tr> | 124 | ····<tr> |
| 125 | ······<td>3.1.1</td> | ||
| 126 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 127 | ······<td·xml:lang="en-US"> | ||
| 128 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 129 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 130 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 131 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 132 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 133 | <pre>[daemon] | ||
| 134 | AutomaticLoginEnable=false</pre> | ||
| 135 | ······</td> | ||
| 136 | ······<td·xml:lang="en-US"> | ||
| 137 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 138 | system·security. | ||
| 139 | ······</td> | ||
| 140 | ····</tr> | ||
| 141 | ····<tr> | ||
| 137 | ······<td>3.1.1<br/>3.1.5</td> | 142 | ······<td>3.1.1<br/>3.1.5</td> |
| 138 | ······<td> | 143 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 139 | ······<td·xml:lang="en-US"> | 144 | ······<td·xml:lang="en-US"> |
| 145 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 146 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 147 | <pre>vc/1 | ||
| 148 | vc/2 | ||
| 149 | vc/3 | ||
| 150 | vc/4</pre> | ||
| 140 | ········Disallow·SSH·login·with·empty·passwords. | ||
| 141 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 142 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 143 | <br·/> | ||
| 144 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 145 | add·or·correct·the·following·line·in | ||
| 146 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 147 | <br·/> | ||
| 148 | <pre>PermitEmptyPasswords·no</pre> | ||
| 149 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 150 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 151 | ······</td> | 151 | ······</td> |
| 152 | ······<td·xml:lang="en-US"> | 152 | ······<td·xml:lang="en-US"> |
| 153 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | ||
| 154 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 155 | 153 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 154 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 155 | using·the·root·account. | ||
| 156 | ······</td> | 156 | ······</td> |
| 157 | ····</tr> | 157 | ····</tr> |
| 158 | ····<tr> | 158 | ····<tr> |
| 159 | ······<td>3.1.1<br/>3.4.5</td> | 159 | ······<td>3.1.1<br/>3.4.5</td> |
| 160 | ······<td>Require·Authentication·for· | 160 | ······<td>Require·Authentication·for·Single·User·Mode</td> |
| 161 | ······<td·xml:lang="en-US"> | 161 | ······<td·xml:lang="en-US"> |
| 162 | ········ | 162 | ········Single-user·mode·is·intended·as·a·system·recovery |
| 163 | method,·providing·a·single·user·root·access·to·the·system | 163 | method,·providing·a·single·user·root·access·to·the·system·by |
| 164 | 164 | providing·a·boot·option·at·startup. | |
| 165 | <br·/><br·/> | 165 | <br·/><br·/> |
| 166 | By·default,· | 166 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set |
| 167 | in·<tt>/usr/lib/systemd/system/ | 167 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. |
| Max diff block lines reached; 448232/454134 bytes (98.70%) of diff not shown. | |||
| Offset 8613, 18 lines modified | Offset 8613, 18 lines modified | ||
| 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | 00021a40:·6b0a·616e·6420·7573·6520·7468·6520·696e··k.and·use·the·in | ||
| 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | 00021a50:·666f·726d·6174·696f·6e20·746f·2070·6f74··formation·to·pot | ||
| 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | 00021a60:·656e·7469·616c·6c79·2063·6f6d·7072·6f6d··entially·comprom | ||
| 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | 00021a70:·6973·6520·7468·6520·696e·7465·6772·6974··ise·the·integrit | ||
| 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | 00021a80:·7920·6f66·2074·6865·2073·7973·7465·6d20··y·of·the·system· | ||
| 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | 00021a90:·616e·640a·6e65·7477·6f72·6b28·7329·2e0a··and.network(s).. | ||
| 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | 00021aa0:·2020·3c2f·7464·3e0a·2020·3c74·643e·7661····</td>.··<td>va | ||
| 00021ab0:·725f·736e·6d70·645f·72 | 00021ab0:·725f·736e·6d70·645f·7277·5f73·7472·696e··r_snmpd_rw_strin | ||
| 00021ac0:·673d·6368·616e·6765·6d65·72 | 00021ac0:·673d·6368·616e·6765·6d65·7277·3c62·722f··g=changemerw<br/ | ||
| 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72· | 00021ad0:·3e76·6172·5f73·6e6d·7064·5f72·6f5f·7374··>var_snmpd_ro_st | ||
| 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572· | 00021ae0:·7269·6e67·3d63·6861·6e67·656d·6572·6f3c··ring=changemero< | ||
| 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | 00021af0:·2f74·643e·0a3c·2f74·723e·0a3c·7472·3e0a··/td>.</tr>.<tr>. | ||
| 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | 00021b00:·2020·3c74·643e·5343·2d35·3c2f·7464·3e0a····<td>SC-5</td>. | ||
| 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | 00021b10:·2020·3c74·643e·4e2f·413c·2f74·643e·0a20····<td>N/A</td>.· | ||
| 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | 00021b20:·203c·7464·3e43·6f6e·6669·6775·7265·204b···<td>Configure·K | ||
| 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | 00021b30:·6572·6e65·6c20·746f·2052·6174·6520·4c69··ernel·to·Rate·Li | ||
| 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | 00021b40:·6d69·7420·5365·6e64·696e·6720·6f66·2044··mit·Sending·of·D | ||
| 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack | 00021b50:·7570·6c69·6361·7465·2054·4350·2041·636b··uplicate·TCP·Ack |
| Offset 2913, 16 lines modified | Offset 2913, 16 lines modified | ||
| 2913 | ··············································································network·management | 2913 | ··············································································network·management |
| 2914 | ··············································································protocol·(SNMP) | 2914 | ··············································································protocol·(SNMP) |
| 2915 | ··············································································community·strings | 2915 | ··············································································community·strings |
| 2916 | ··············································································must·be·changed·to | 2916 | ··············································································must·be·changed·to |
| 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. | 2917 | ··································Edit·/etc/snmp/snmpd.conf,·remove·or·change·maintain·security. |
| 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is | 2918 | ··································the·default·community·strings·of·public·and·If·the·service·is |
| 2919 | ··································private.·This·profile·configures·new·read-··running·with·the | 2919 | ··································private.·This·profile·configures·new·read-··running·with·the |
| 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_r | 2920 | ········N/·Ensure·Default·SNMP····only·community·string·to·changemero·and·····default·············var_snmpd_rw_string=changemerw |
| 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_r | 2921 | IA-5(e)·A··Password·Is·Not·Used···read-write·community·string·to·changemerw.··authenticators,·····var_snmpd_ro_string=changemero |
| 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can | 2922 | ··································Once·the·default·community·strings·have·····then·anyone·can |
| 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about | 2923 | ··································been·changed,·restart·the·SNMP·service:·····gather·data·about |
| 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the | 2924 | ··································$·sudo·service·snmpd·restart················the·system·and·the |
| 2925 | ··············································································network·and·use·the | 2925 | ··············································································network·and·use·the |
| 2926 | ··············································································information·to | 2926 | ··············································································information·to |
| 2927 | ··············································································potentially | 2927 | ··············································································potentially |
| 2928 | ··············································································compromise·the | 2928 | ··············································································compromise·the |
| Offset 66, 14973 lines modified | Offset 66, 14973 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (3933 lines added, 3933 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·6e79·2041·7474·656d·7074·7320·746f···Any·Attempts·to | ||
| 000004a0:·20 | 000004a0:·2052·756e·2063·6863·6f6e·3c2f·7464·3e0a···Run·chcon</td>. | ||
| 000004b0:· | 000004b0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004c0:·6 | 000004c0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004d0:·20 | 000004d0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 000004e0:·2 | 000004e0:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 000004f0:·6 | 000004f0:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000500:· | 00000500:·7420·616e·7920·6578·6563·7574·696f·6e20··t·any·execution· | ||
| 00000510:· | 00000510:·6174·7465·6d70·740a·6f66·2074·6865·203c··attempt.of·the·< | ||
| 00000520:· | 00000520:·7474·3e63·6863·6f6e·3c2f·7474·3e20·636f··tt>chcon</tt>·co | ||
| 00000530:· | 00000530:·6d6d·616e·6420·666f·7220·616c·6c20·7573··mmand·for·all·us | ||
| 00000540:·6 | 00000540:·6572·7320·616e·6420·726f·6f74·2e20·4966··ers·and·root.·If | ||
| 00000550:· | 00000550:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000560:· | 00000560:·2f74·743e·0a64·6165·6d6f·6e20·6973·2063··/tt>.daemon·is·c | ||
| 00000570:·6 | 00000570:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000580:· | 00000580:·2074·6865·203c·7474·3e61·7567·656e·7275···the·<tt>augenru | ||
| 00000590:·6 | 00000590:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 000005a0:· | 000005a0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 000005b0:·756c·6573· | 000005b0:·756c·6573·0a64·7572·696e·6720·6461·656d··ules.during·daem | ||
| 000005c0:·6 | 000005c0:·6f6e·2073·7461·7274·7570·2028·7468·6520··on·startup·(the· | ||
| 000005d0:· | 000005d0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 000005e0:·6 | 000005e0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000005f0:· | 000005f0:·7320·746f·2061·2066·696c·6520·7769·7468··s·to·a·file·with | ||
| 00000600:·20 | 00000600:·2073·7566·6669·780a·3c74·743e·2e72·756c···suffix.<tt>.rul | ||
| 00000610:·6 | 00000610:·6573·3c2f·7474·3e20·696e·2074·6865·2064··es</tt>·in·the·d | ||
| 00000620:· | 00000620:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 00000630:· | 00000630:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 00000640:· | 00000640:·2f74·743e·3a0a·3c70·7265·3e2d·6120·616c··/tt>:.<pre>-a·al | ||
| 00000650:·7 | 00000650:·7761·7973·2c65·7869·7420·2d46·2070·6174··ways,exit·-F·pat | ||
| 00000660:· | 00000660:·683d·2f75·7372·2f62·696e·2f63·6863·6f6e··h=/usr/bin/chcon | ||
| 00000670:· | 00000670:·202d·4620·7065·726d·3d78·202d·4620·6175···-F·perm=x·-F·au | ||
| 00000680:· | 00000680:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000690:· | 00000690:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000006a0:· | 000006a0:·793d·7072·6976·696c·6567·6564·3c2f·7072··y=privileged</pr | ||
| 000006b0:·6 | 000006b0:·653e·0a49·6620·7468·6520·3c74·743e·6175··e>.If·the·<tt>au | ||
| 000006c0:·6 | 000006c0:·6469·7464·3c2f·7474·3e20·6461·656d·6f6e··ditd</tt>·daemon | ||
| 000006d0:· | 000006d0:·2069·7320·636f·6e66·6967·7572·6564·2074···is·configured·t | ||
| 000006e0:· | 000006e0:·6f20·7573·6520·7468·6520·3c74·743e·6175··o·use·the·<tt>au | ||
| 000006f0:·6974· | 000006f0:·6469·7463·746c·3c2f·7474·3e0a·7574·696c··ditctl</tt>.util | ||
| 00000700:·697 | 00000700:·6974·7920·746f·2072·6561·6420·6175·6469··ity·to·read·audi | ||
| 00000710:· | 00000710:·7420·7275·6c65·7320·6475·7269·6e67·2064··t·rules·during·d | ||
| 00000720:·6 | 00000720:·6165·6d6f·6e20·7374·6172·7475·702c·2061··aemon·startup,·a | ||
| 00000730:· | 00000730:·6464·2074·6865·2066·6f6c·6c6f·7769·6e67··dd·the·following | ||
| 00000740:·20 | 00000740:·206c·696e·6573·2074·6f0a·3c74·743e·2f65···lines·to.<tt>/e | ||
| 00000750:· | 00000750:·7463·2f61·7564·6974·2f61·7564·6974·2e72··tc/audit/audit.r | ||
| 00000760:· | 00000760:·756c·6573·3c2f·7474·3e20·6669·6c65·3a0a··ules</tt>·file:. | ||
| 00000770:· | 00000770:·3c70·7265·3e2d·6120·616c·7761·7973·2c65··<pre>-a·always,e | ||
| 00000780:· | 00000780:·7869·7420·2d46·2070·6174·683d·2f75·7372··xit·-F·path=/usr | ||
| 00000790:·2f6 | 00000790:·2f62·696e·2f63·6863·6f6e·202d·4620·7065··/bin/chcon·-F·pe | ||
| 000007a0:· | 000007a0:·726d·3d78·202d·4620·6175·6964·2667·743b··rm=x·-F·auid> | ||
| 000007b0:· | 000007b0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000007c0:· | 000007c0:·6e73·6574·202d·4620·6b65·793d·7072·6976··nset·-F·key=priv | ||
| 000007d0:· | 000007d0:·696c·6567·6564·3c2f·7072·653e·0a20·2020··ileged</pre>.··· | ||
| 000007e0:· | 000007e0:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 000007f0:· | 000007f0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000800:· | 00000800:·5553·223e·0a20·2020·2020·2020·204d·6973··US">.········Mis | ||
| 00000810:·7 | 00000810:·7573·6520·6f66·2070·7269·7669·6c65·6765··use·of·privilege | ||
| 00000820:· | 00000820:·6420·6675·6e63·7469·6f6e·732c·2065·6974··d·functions,·eit | ||
| 00000830:·6 | 00000830:·6865·7220·696e·7465·6e74·696f·6e61·6c6c··her·intentionall | ||
| 00000840:· | 00000840:·7920·6f72·2075·6e69·6e74·656e·7469·6f6e··y·or·unintention | ||
| 00000850:· | 00000850:·616c·6c79·2062·790a·6175·7468·6f72·697a··ally·by.authoriz | ||
| 00000860:·6 | 00000860:·6564·2075·7365·7273·2c20·6f72·2062·7920··ed·users,·or·by· | ||
| 00000870:· | 00000870:·756e·6175·7468·6f72·697a·6564·2065·7874··unauthorized·ext | ||
| 00000880:·6 | 00000880:·6572·6e61·6c20·656e·7469·7469·6573·2074··ernal·entities·t | ||
| 00000890:·6 | 00000890:·6861·7420·6861·7665·2063·6f6d·7072·6f6d··hat·have·comprom | ||
| 000008a0:· | 000008a0:·6973·6564·2073·7973·7465·6d20·6163·636f··ised·system·acco | ||
| 000008b0:·6 | 000008b0:·756e·7473·2c0a·6973·2061·2073·6572·696f··unts,.is·a·serio | ||
| 000008c0:·7 | 000008c0:·7573·2061·6e64·206f·6e67·6f69·6e67·2063··us·and·ongoing·c | ||
| 000008d0:· | 000008d0:·6f6e·6365·726e·2061·6e64·2063·616e·2068··oncern·and·can·h | ||
| 000008e0:· | 000008e0:·6176·6520·7369·676e·6966·6963·616e·7420··ave·significant· | ||
| 000008f0:· | 000008f0:·6164·7665·7273·6520·696d·7061·6374·7320··adverse·impacts· | ||
| 00000900:·6 | 00000900:·6f6e·206f·7267·616e·697a·6174·696f·6e73··on·organizations | ||
| 00000910:· | 00000910:·2e0a·4175·6469·7469·6e67·2074·6865·2075··..Auditing·the·u | ||
| 00000920:· | 00000920:·7365·206f·6620·7072·6976·696c·6567·6564··se·of·privileged | ||
| 00000930:· | 00000930:·2066·756e·6374·696f·6e73·2069·7320·6f6e···functions·is·on | ||
| 00000940:·6 | 00000940:·6520·7761·7920·746f·2064·6574·6563·7420··e·way·to·detect· | ||
| 00000950:·6 | 00000950:·7375·6368·206d·6973·7573·6520·616e·6420··such·misuse·and· | ||
| 00000960:·69 | 00000960:·6964·656e·7469·6679·0a74·6865·2072·6973··identify.the·ris | ||
| 00000970:·6 | 00000970:·6b20·6672·6f6d·2069·6e73·6964·6572·2061··k·from·insider·a | ||
| 00000980:· | 00000980:·6e64·2061·6476·616e·6365·6420·7065·7273··nd·advanced·pers | ||
| 00000990:· | 00000990:·6973·7465·6e74·2074·6872·6561·7473·2e0a··istent·threats.. | ||
| 000009a0:· | 000009a0:·3c62·7220·2f3e·3c62·7220·2f3e·0a50·7269··<br·/><br·/>.Pri | ||
| 000009b0:· | 000009b0:·7669·6c65·6765·6420·7072·6f67·7261·6d73··vileged·programs | ||
| 000009c0:· | 000009c0:·2061·7265·2073·7562·6a65·6374·2074·6f20···are·subject·to· | ||
| 000009d0:·6 | 000009d0:·6573·6361·6c61·7469·6f6e·2d6f·662d·7072··escalation-of-pr | ||
| 000009e0:· | 000009e0:·6976·696c·6567·6520·6174·7461·636b·732c··ivilege·attacks, | ||
| 000009f0:· | 000009f0:·0a77·6869·6368·2061·7474·656d·7074·2074··.which·attempt·t | ||
| 00000a00:·6 | 00000a00:·6f20·7375·6276·6572·7420·7468·6569·7220··o·subvert·their· | ||
| 00000a10:·6 | 00000a10:·6e6f·726d·616c·2072·6f6c·6520·6f66·2070··normal·role·of·p | ||
| 00000a20:· | 00000a20:·726f·7669·6469·6e67·2073·6f6d·6520·6e65··roviding·some·ne | ||
| 00000a30:· | 00000a30:·6365·7373·6172·7920·6275·740a·6c69·6d69··cessary·but.limi | ||
| 00000a40:·74 | 00000a40:·7465·6420·6361·7061·6269·6c69·7479·2e20··ted·capability.· | ||
| 00000a50:· | 00000a50:·4173·2073·7563·682c·206d·6f74·6976·6174··As·such,·motivat | ||
| 00000a60:· | 00000a60:·696f·6e20·6578·6973·7473·2074·6f20·6d6f··ion·exists·to·mo | ||
| 00000a70:·6 | 00000a70:·6e69·746f·7220·7468·6573·6520·7072·6f67··nitor·these·prog | ||
| 00000a80:· | 00000a80:·7261·6d73·2066·6f72·0a75·6e75·7375·616c··rams·for.unusual | ||
| 00000a90:·206 | 00000a90:·2061·6374·6976·6974·792e·0a20·2020·2020···activity..····· | ||
| 00000aa0:· | 00000aa0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 00000ab0:· | 00000ab0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00000ac0:· | 00000ac0:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000ad0:· | 00000ad0:·4155·2d31·3228·6329·3c62·722f·3e43·4d2d··AU-12(c)<br/>CM- | ||
| 00000ae0:· | 00000ae0:·3628·6129·3c2f·7464·3e0a·2020·2020·2020··6(a)</td>.······ | ||
| 00000af0:·3 | 00000af0:·3c74·643e·5265·636f·7264·2055·6e73·7563··<td>Record·Unsuc | ||
| 00000b00:· | 00000b00:·6365·7373·6675·6c20·4465·6c65·7465·2041··cessful·Delete·A | ||
| 00000b10:· | 00000b10:·7474·656d·7074·7320·746f·2046·696c·6573··ttempts·to·Files | ||
| 00000b20:· | 00000b20:·202d·2075·6e6c·696e·6b3c·2f74·643e·0a20···-·unlink</td>.· | ||
| 00000b30:· | 00000b30:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000b40:·6 | 00000b40:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000b50:·2 | 00000b50:·2020·200a·5468·6520·6175·6469·7420·7379·····.The·audit·sy | ||
| 00000b60:· | 00000b60:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000b70:· | 00000b70:·6563·7420·756e·7375·6363·6573·7366·756c··ect·unsuccessful | ||
| 00000b80:·20 | 00000b80:·2066·696c·6520·6465·6c65·7469·6f6e·0a61···file·deletion.a | ||
| 00000b90:· | 00000b90:·7474·656d·7074·7320·666f·7220·616c·6c20··ttempts·for·all· | ||
| 00000ba0:· | 00000ba0:·7573·6572·7320·616e·6420·726f·6f74·2e20··users·and·root.· | ||
| 00000bb0:·2074·6865·20 | 00000bb0:·4966·2074·6865·203c·7474·3e61·7564·6974··If·the·<tt>audit | ||
| 00000bc0:·6 | 00000bc0:·643c·2f74·743e·2064·6165·6d6f·6e20·6973··d</tt>·daemon·is | ||
| 00000bd0:·206 | 00000bd0:·2063·6f6e·6669·6775·7265·640a·746f·2075···configured.to·u | ||
| 00000be0:· | 00000be0:·7365·2074·6865·203c·7474·3e61·7567·656e··se·the·<tt>augen | ||
| Max diff block lines reached; 6741346/7284678 bytes (92.54%) of diff not shown. | |||
| Offset 124, 60 lines modified | Offset 124, 62 lines modified | ||
| 124 | ······</td> | 124 | ······</td> |
| 125 | ······<td·xml:lang="en-US"> | 125 | ······<td·xml:lang="en-US"> |
| 126 | ········Without·basic·configurations,·audit·may·not·perform·as·expected.·It·may·not·be·able·to·correctly·handle·events·under·stressful·conditions,·or·log·events·in·case·of·failure. | 126 | ········Without·basic·configurations,·audit·may·not·perform·as·expected.·It·may·not·be·able·to·correctly·handle·events·under·stressful·conditions,·or·log·events·in·case·of·failure. |
| 127 | ······</td> | 127 | ······</td> |
| 128 | ····</tr> | 128 | ····</tr> |
| 129 | ····<tr> | 129 | ····<tr> |
| 130 | ······<td>FAU_GEN.1</td> | 130 | ······<td>FAU_GEN.1</td> |
| 131 | ······<td>En | 131 | ······<td>Ensure·the·audit-libs·package·as·a·part·of·audit·Subsystem·is·Installed</td> |
| 132 | ······<td·xml:lang="en-US"> | 132 | ······<td·xml:lang="en-US"> |
| 133 | ········The·audit-libs·package·should·be·installed. | ||
| 133 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | ||
| 134 | check·that·all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have·<tt>audit=1</tt> | ||
| 135 | included·in·its·options.<br·/> | ||
| 136 | To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit, | ||
| 137 | add·<tt>audit=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 138 | ······</td> | 134 | ······</td> |
| 139 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 136 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 140 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | ||
| 141 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 142 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 143 | ensures·it·is·set·for·every·process·during·boot. | ||
| 144 | ······</td> | 137 | ······</td> |
| 145 | ····</tr> | 138 | ····</tr> |
| 146 | ····<tr> | 139 | ····<tr> |
| 147 | ······<td>FAU_GEN.1</td> | 140 | ······<td>FAU_GEN.1</td> |
| 148 | ······<td>En | 141 | ······<td>Ensure·the·audit·Subsystem·is·Installed</td> |
| 149 | ······<td·xml:lang="en-US"> | 142 | ······<td·xml:lang="en-US"> |
| 143 | ········The·audit·package·should·be·installed. | ||
| 150 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of | ||
| 151 | the·Linux·Auditing·System,·as·it·is·responsible·for·writing·audit·records·to | ||
| 152 | disk. | ||
| 153 | The·<code>auditd</code>·service·can·be·enabled·with·the·following·command: | ||
| 154 | <pre>$·sudo·systemctl·enable·auditd.service</pre> | ||
| 155 | ······</td> | 144 | ······</td> |
| 156 | ······<td·xml:lang="en-US"> | 145 | ······<td·xml:lang="en-US"> |
| 146 | ········The·auditd·service·is·an·access·monitoring·and·accounting·daemon,·watching·system·calls·to·audit·any·access,·in·comparison·with·potential·local·access·control·policy·such·as·SELinux·policy. | ||
| 157 | ········Without·establishing·what·type·of·events·occurred,·it·would·be·difficult | ||
| 158 | to·establish,·correlate,·and·investigate·the·events·leading·up·to·an·outage·or·attack. | ||
| 159 | Ensuring·the·<tt>auditd</tt>·service·is·active·ensures·audit·records | ||
| 160 | generated·by·the·kernel·are·appropriately·recorded. | ||
| 161 | <br·/><br·/> | ||
| 162 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of | ||
| 163 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they | ||
| 164 | can·be·held·accountable·for·their·actions. | ||
| 165 | ······</td> | 147 | ······</td> |
| 166 | ····</tr> | 148 | ····</tr> |
| 167 | ····<tr> | 149 | ····<tr> |
| 168 | ······<td>FAU_GEN.1</td> | 150 | ······<td>FAU_GEN.1</td> |
| 169 | ······<td> | 151 | ······<td>Set·number·of·records·to·cause·an·explicit·flush·to·audit·logs</td> |
| 170 | ······<td·xml:lang="en-US"> | 152 | ······<td·xml:lang="en-US"> |
| 171 | ········T | 153 | ········To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command |
| 154 | after·writing·<abbr·title="$var_auditd_freq"><tt>50</tt></abbr>·records,·set·<tt>freq</tt>·to·<tt><abbr·title="$var_auditd_freq"><tt>50</tt></abbr></tt> | ||
| 155 | in·<tt>/etc/audit/auditd.conf</tt>. | ||
| 172 | ······</td> | 156 | ······</td> |
| 173 | ······<td·xml:lang="en-US"> | 157 | ······<td·xml:lang="en-US"> |
| 174 | ········ | 158 | ········If·option·<tt>freq</tt>·isn't·set·to·<tt><sub·idref="var_auditd_freq"·/></tt>,·the·flush·to·disk |
| 159 | may·happen·after·higher·number·of·records,·increasing·the·danger | ||
| 160 | of·audit·loss. | ||
| 161 | ······</td> | ||
| 162 | ····</tr> | ||
| 163 | ····<tr> | ||
| 164 | ······<td>FAU_GEN.1</td> | ||
| 165 | ······<td>Enable·Auditing·to·Start·Prior·to·the·Audit·Daemon·in·zIPL</td> | ||
| 166 | ······<td·xml:lang="en-US"> | ||
| 167 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start·prior·to·the·audit·daemon, | ||
| 168 | check·that·all·boot·entries·in·<tt>/boot/loader/entries/*.conf</tt>·have·<tt>audit=1</tt> | ||
| 169 | included·in·its·options.<br·/> | ||
| 170 | To·ensure·that·new·kernels·and·boot·entries·continue·to·enable·audit, | ||
| 171 | add·<tt>audit=1</tt>·to·<tt>/etc/kernel/cmdline</tt>. | ||
| 172 | ······</td> | ||
| 173 | ······<td·xml:lang="en-US"> | ||
| 174 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | ||
| 175 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | ||
| 176 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | ||
| 177 | ensures·it·is·set·for·every·process·during·boot. | ||
| 175 | ······</td> | 178 | ······</td> |
| 176 | ····</tr> | 179 | ····</tr> |
| 177 | ····<tr> | 180 | ····<tr> |
| 178 | ······<td>FAU_GEN.1</td> | 181 | ······<td>FAU_GEN.1</td> |
| 179 | ······<td>Include·Local·Events·in·Audit·Logs</td> | 182 | ······<td>Include·Local·Events·in·Audit·Logs</td> |
| 180 | ······<td·xml:lang="en-US"> | 183 | ······<td·xml:lang="en-US"> |
| 181 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set | 184 | ········To·configure·Audit·daemon·to·include·local·events·in·Audit·logs,·set |
| Offset 187, 24 lines modified | Offset 189, 32 lines modified | ||
| 187 | ······<td·xml:lang="en-US"> | 189 | ······<td·xml:lang="en-US"> |
| 188 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from | 190 | ········If·option·<tt>local_events</tt>·isn't·set·to·<tt>yes</tt>·only·events·from |
| 189 | network·will·be·aggregated. | 191 | network·will·be·aggregated. |
| 190 | ······</td> | 192 | ······</td> |
| 191 | ····</tr> | 193 | ····</tr> |
| 192 | ····<tr> | 194 | ····<tr> |
| 193 | ······<td>FAU_GEN.1</td> | 195 | ······<td>FAU_GEN.1</td> |
| 194 | ······<td> | 196 | ······<td>Enable·auditd·Service</td> |
| 195 | ······<td·xml:lang="en-US"> | 197 | ······<td·xml:lang="en-US"> |
| 196 | ········To·configure·Audit·daemon·to·issue·an·explicit·flush·to·disk·command | ||
| 197 | after·writing·<abbr·title="$var_auditd_freq"><tt>50</tt></abbr>·records,·set·<tt>freq</tt>·to·<tt><abbr·title="$var_auditd_freq"><tt>50</tt></abbr></tt> | ||
| 198 | 198 | ········The·<tt>auditd</tt>·service·is·an·essential·userspace·component·of | |
| 199 | the·Linux·Auditing·System,·as·it·is·responsible·for·writing·audit·records·to | ||
| 200 | disk. | ||
| 201 | The·<code>auditd</code>·service·can·be·enabled·with·the·following·command: | ||
| 202 | <pre>$·sudo·systemctl·enable·auditd.service</pre> | ||
| 199 | ······</td> | 203 | ······</td> |
| 200 | ······<td·xml:lang="en-US"> | 204 | ······<td·xml:lang="en-US"> |
| 201 | ········If·option·<tt>freq</tt>·isn't·set·to·<tt><sub·idref="var_auditd_freq"·/></tt>,·the·flush·to·disk | ||
| 202 | may·happen·after·higher·number·of·records,·increasing·the·danger | ||
| 203 | of· | 205 | ········Without·establishing·what·type·of·events·occurred,·it·would·be·difficult |
| 206 | to·establish,·correlate,·and·investigate·the·events·leading·up·to·an·outage·or·attack. | ||
| 207 | Ensuring·the·<tt>auditd</tt>·service·is·active·ensures·audit·records | ||
| 208 | generated·by·the·kernel·are·appropriately·recorded. | ||
| 209 | <br·/><br·/> | ||
| 210 | Additionally,·a·properly·configured·audit·subsystem·ensures·that·actions·of | ||
| 211 | individual·system·users·can·be·uniquely·traced·to·those·users·so·they | ||
| 212 | can·be·held·accountable·for·their·actions. | ||
| 204 | ······</td> | 213 | ······</td> |
| 205 | ····</tr> | 214 | ····</tr> |
| 206 | ····<tr> | 215 | ····<tr> |
| 207 | ······<td>FAU_GEN.1</td> | 216 | ······<td>FAU_GEN.1</td> |
| 208 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> | 217 | ······<td>Enable·Auditing·for·Processes·Which·Start·Prior·to·the·Audit·Daemon</td> |
| 209 | ······<td·xml:lang="en-US"> | 218 | ······<td·xml:lang="en-US"> |
| 210 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start | 219 | ········To·ensure·all·processes·can·be·audited,·even·those·which·start |
| Offset 221, 132 lines modified | Offset 231, 221 lines modified | ||
| 221 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether | 231 | ········Each·process·on·the·system·carries·an·"auditable"·flag·which·indicates·whether |
| 222 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling | 232 | its·activities·can·be·audited.·Although·<tt>auditd</tt>·takes·care·of·enabling |
| 223 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument | 233 | this·for·all·processes·which·launch·after·it·does,·adding·the·kernel·argument |
| Max diff block lines reached; 506865/513867 bytes (98.64%) of diff not shown. | |||
| Offset 127, 26 lines modified | Offset 127, 14 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 147 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 150 | modify·the·following·line·in | 138 | modify·the·following·line·in |
| 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 152 | <pre>DefaultZone=drop</pre> | 140 | <pre>DefaultZone=drop</pre> |
| Offset 156, 14 lines modified | Offset 144, 26 lines modified | ||
| 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 146 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 147 | accepted. |
| 160 | ······</td> | 148 | ······</td> |
| 161 | ····</tr> | 149 | ····</tr> |
| 162 | ····<tr> | 150 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | 166 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 168 | network. | 168 | network. |
| 169 | ······</td> | 169 | ······</td> |
| Offset 246, 14 lines modified | Offset 246, 41 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 260 | log·size,·although·some·activity·would·not·be·logged. | ||
| 261 | ······</td> | ||
| 262 | ····</tr> | ||
| 263 | ····<tr> | ||
| 264 | ······<td>Req-1.4.3</td> | ||
| 265 | ······<td>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</td> | ||
| 266 | ······<td·xml:lang="en-US"> | ||
| 267 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_echo_ignore_broadcasts</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_echo_ignore_broadcasts=1</pre> | ||
| 268 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_echo_ignore_broadcasts·=·1</pre> | ||
| 269 | ······</td> | ||
| 270 | ······<td·xml:lang="en-US"> | ||
| 271 | ········Responding·to·broadcast·(ICMP)·echoes·facilitates·network·mapping | ||
| 272 | and·provides·a·vector·for·amplification·attacks. | ||
| 273 | <br·/> | ||
| 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | ||
| 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | ||
| 276 | ······</td> | ||
| 277 | ····</tr> | ||
| 278 | ····<tr> | ||
| 279 | ······<td>Req-1.4.3</td> | ||
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 254 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 257 | ······</td> | 284 | ······</td> |
| 258 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers |
| Offset 277, 22 lines modified | Offset 304, 25 lines modified | ||
| 277 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as | 304 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as |
| 278 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is | 305 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is |
| 279 | absolutely·required. | 306 | absolutely·required. |
| 280 | ······</td> | 307 | ······</td> |
| 281 | ····</tr> | 308 | ····</tr> |
| 282 | ····<tr> | 309 | ····<tr> |
| 283 | ······<td>Req-1.4.3</td> | 310 | ······<td>Req-1.4.3</td> |
| 284 | ······<td>Enable·Kernel·Parameter·to· | 311 | ······<td>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</td> |
| 285 | ······<td·xml:lang="en-US"> | 312 | ······<td·xml:lang="en-US"> |
| 286 | ········To·set·the·runtime·status·of·the·<code>net.ipv4. | 313 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.rp_filter</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1</pre> |
| 287 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4. | 314 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.conf.all.rp_filter·=·1</pre> |
| 288 | ······</td> | 315 | ······</td> |
| 289 | ······<td·xml:lang="en-US"> | 316 | ······<td·xml:lang="en-US"> |
| 290 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 291 | l | 317 | ········Enabling·reverse·path·filtering·drops·packets·with·source·addresses |
| 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | ||
| 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | ||
| 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | ||
| 321 | networks. | ||
| 292 | ······</td> | 322 | ······</td> |
| 293 | ····</tr> | 323 | ····</tr> |
| 294 | ····<tr> | 324 | ····<tr> |
| 295 | ······<td>Req-1.4.3</td> | 325 | ······<td>Req-1.4.3</td> |
| 296 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> | 326 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> |
| 297 | ······<td·xml:lang="en-US"> | 327 | ······<td·xml:lang="en-US"> |
| 298 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> | 328 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> |
| Offset 304, 44 lines modified | Offset 334, 14 lines modified | ||
| 304 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | 334 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect |
| 305 | message·could·result·in·a·man-in-the-middle·attack. | 335 | message·could·result·in·a·man-in-the-middle·attack. |
| 306 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should | 336 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should |
| 307 | be·disabled·unless·absolutely·required. | 337 | be·disabled·unless·absolutely·required. |
| Max diff block lines reached; 289962/296778 bytes (97.70%) of diff not shown. | |||
| Offset 90, 21 lines modified | Offset 90, 14 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 104 | ····················································································In·firewalld·the | 97 | ····················································································In·firewalld·the |
| 105 | ····················································································default·zone·is | 98 | ····················································································default·zone·is |
| 106 | ····················································································applied·only·after | 99 | ····················································································applied·only·after |
| 107 | ····················································································all·the·applicable | 100 | ····················································································all·the·applicable |
| 108 | ····················································································rules·in·the·table | 101 | ····················································································rules·in·the·table |
| 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 112, 14 lines modified | Offset 105, 21 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 106 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 107 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 108 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 109 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 110 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 111 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································Loopback·traffic·is | 119 | ····················································································Loopback·traffic·is |
| 120 | ····················································································generated·between | 120 | ····················································································generated·between |
| 121 | ····················································································processes·on | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | 122 | ····················································································machine·and·is |
| 123 | ····················································································typically·critical | 123 | ····················································································typically·critical |
| 124 | ····················································································to·operation·of·the | 124 | ····················································································to·operation·of·the |
| 125 | ····················································································system.·The | 125 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 228, 23 lines modified | Offset 253, 32 lines modified | ||
| 228 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as | 253 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as |
| 229 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) | 254 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) |
| 230 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate | 255 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate |
| 231 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be | 256 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be |
| 232 | ·····························sysctl.d:··············································disabled·unless·it | 257 | ·····························sysctl.d:··············································disabled·unless·it |
| 233 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely | 258 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely |
| 234 | ····················································································required. | 259 | ····················································································required. |
| 260 | ····················································································Enabling·reverse | ||
| 261 | ····················································································path·filtering | ||
| 262 | ····················································································drops·packets·with | ||
| 263 | ····················································································source·addresses | ||
| 264 | ····················································································that·should·not | ||
| 235 | ·····························To·set·the·runtime·status·of·the | 265 | ·····························To·set·the·runtime·status·of·the·······················have·been·able·to |
| 266 | ·········Enable·Kernel·······net.ipv4.conf.all.rp_filter·kernel·parameter,·run·the··be·received·on·the | ||
| 267 | ·········Parameter·to·Use····following·command:·····································interface·they·were | ||
| 268 | Req-·····Reverse·Path········$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1·········received·on.·It | ||
| 269 | 1.4.3····Filtering·on·all····To·make·sure·that·the·setting·is·persistent,·add·the···should·not·be·used | ||
| 236 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 237 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 238 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 239 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 240 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 241 | ·········Interfaces | 270 | ·········IPv4·Interfaces·····following·line·to·a·file·in·the·directory·/etc/········on·systems·which |
| 242 | ·····························sysctl.d: | ||
| 243 | ····························· | 271 | ·····························sysctl.d:··············································are·routers·for |
| 272 | ·····························net.ipv4.conf.all.rp_filter·=·1························complicated | ||
| 273 | ····················································································networks,·but·is | ||
| 274 | ····················································································helpful·for·end | ||
| 275 | ····················································································hosts·and·routers | ||
| 276 | ····················································································serving·small | ||
| 277 | ····················································································networks. | ||
| 244 | ····················································································ICMP·redirect | 278 | ····················································································ICMP·redirect |
| 245 | ····················································································messages·are·used | 279 | ····················································································messages·are·used |
| 246 | ····················································································by·routers·to | 280 | ····················································································by·routers·to |
| 247 | ····················································································inform·hosts·that·a | 281 | ····················································································inform·hosts·that·a |
| 248 | ····················································································more·direct·route | 282 | ····················································································more·direct·route |
| 249 | ····················································································exists·for·a | 283 | ····················································································exists·for·a |
| 250 | ····················································································particular | 284 | ····················································································particular |
| Offset 261, 48 lines modified | Offset 295, 14 lines modified | ||
| 261 | ····················································································This·feature·of·the | 295 | ····················································································This·feature·of·the |
| 262 | ····················································································IPv4·protocol·has | 296 | ····················································································IPv4·protocol·has |
| 263 | ····················································································few·legitimate | 297 | ····················································································few·legitimate |
| 264 | ····················································································uses.·It·should·be | 298 | ····················································································uses.·It·should·be |
| Max diff block lines reached; 492440/505061 bytes (97.50%) of diff not shown. | |||
| Offset 63, 273 lines modified | Offset 63, 273 lines modified | ||
| 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | 000003e0:·2054·6974·6c65·3c2f·7468·3e0a·2020·2020···Title</th>.···· | ||
| 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | 000003f0:·3c74·683e·4465·7363·7269·7074·696f·6e3c··<th>Description< | ||
| 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | 00000400:·2f74·683e·0a20·2020·203c·7468·3e52·6174··/th>.····<th>Rat | ||
| 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | 00000410:·696f·6e61·6c65·3c2f·7468·3e0a·2020·3c2f··ionale</th>.··</ | ||
| 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | 00000420:·7468·6561·643e·0a20·203c·7462·6f64·793e··thead>.··<tbody> | ||
| 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | 00000430:·0a20·203c·7472·3e0a·2020·2020·2020·3c74··.··<tr>.······<t | ||
| 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | 00000440:·643e·5231·3c2f·7464·3e0a·2020·2020·2020··d>R1</td>.······ | ||
| 00000450:·3c74·643e·456e·7375·7265·2053·4d45·5020··<td>Ensure·SMEP· | |||
| 00000450:·3c74·643e·5072·6566·6572·2074·6f20·7573··<td>Prefer·to·us | |||
| 00000460:·6520·6120·3634·2d62·6974·204f·7065·7261··e·a·64-bit·Opera | |||
| 00000470:·7469·6e67·2053·7973·7465·6d20·7768·656e··ting·System·when | |||
| 00000480:·2073·7570·706f·7274·6564·3c2f·7464·3e0a···supported</td>. | |||
| 00000490:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 000004a0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 000004b0:·2020·2020·5072·6566·6572·2069·6e73·7461······Prefer·insta | |||
| 000004c0:·6c6c·6174·696f·6e20·6f66·2036·342d·6269··llation·of·64-bi | |||
| 000004d0:·7420·6f70·6572·6174·696e·6720·7379·7374··t·operating·syst | |||
| 000004e0:·656d·7320·7768·656e·2074·6865·2043·5055··ems·when·the·CPU | |||
| 000004f0:·2073·7570·706f·7274·7320·6974·2e0a·2020···supports·it..·· | |||
| 00000500:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 00000510:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 00000520:·2d55·5322·3e0a·2020·2020·2020·2020·5573··-US">.········Us | |||
| 00000530:·6520·6f66·2061·2036·342d·6269·7420·6f70··e·of·a·64-bit·op | |||
| 00000540:·6572·6174·696e·6720·7379·7374·656d·206f··erating·system·o | |||
| 00000550:·6666·6572·7320·6120·6665·7720·6164·7661··ffers·a·few·adva | |||
| 00000560:·6e74·6167·6573·2c20·6c69·6b65·2061·206c··ntages,·like·a·l | |||
| 00000570:·6172·6765·7220·6164·6472·6573·7320·7370··arger·address·sp | |||
| 00000580:·6163·6520·7261·6e67·6520·666f·720a·4164··ace·range·for.Ad | |||
| 00000590:·6472·6573·7320·5370·6163·6520·4c61·796f··dress·Space·Layo | |||
| 000005a0:·7574·2052·616e·646f·6d69·7a61·7469·6f6e··ut·Randomization | |||
| 000005b0:·2028·4153·4c52·2920·616e·6420·7379·7374···(ASLR)·and·syst | |||
| 000005c0:·656d·6174·6963·2070·7265·7365·6e63·6520··ematic·presence· | |||
| 000005d0:·6f66·204e·6f20·6558·6563·7574·6520·616e··of·No·eXecute·an | |||
| 000005e0:·6420·4578·6563·7574·6520·4469·7361·626c··d·Execute·Disabl | |||
| 000005f0:·6520·284e·582f·5844·2920·7072·6f74·6563··e·(NX/XD)·protec | |||
| 00000600:·7469·6f6e·2062·6974·732e·0a20·2020·2020··tion·bits..····· | |||
| 00000610:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00000620:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 00000630:·3c74·643e·5231·3c2f·7464·3e0a·2020·2020··<td>R1</td>.···· | |||
| 00000640:·2020·3c74·643e·496e·7374·616c·6c20·5041····<td>Install·PA | |||
| 00000650:·4520·4b65·726e·656c·206f·6e20·5375·7070··E·Kernel·on·Supp | |||
| 00000660:·6f72·7465·6420·3332·2d62·6974·2078·3836··orted·32-bit·x86 | |||
| 00000670:·2053·7973·7465·6d73·3c2f·7464·3e0a·2020···Systems</td>.·· | |||
| 00000680:·2020·2020·3c74·6420·786d·6c3a·6c61·6e67······<td·xml:lang | |||
| 00000690:·3d22·656e·2d55·5322·3e0a·2020·2020·2020··="en-US">.······ | |||
| 000006a0:·2020·5379·7374·656d·7320·7468·6174·2061····Systems·that·a | |||
| 000006b0:·7265·2075·7369·6e67·2074·6865·2036·342d··re·using·the·64- | |||
| 000006c0:·6269·7420·7838·3620·6b65·726e·656c·2070··bit·x86·kernel·p | |||
| 000006d0:·6163·6b61·6765·0a64·6f20·6e6f·7420·6e65··ackage.do·not·ne | |||
| 000006e0:·6564·2074·6f20·696e·7374·616c·6c20·7468··ed·to·install·th | |||
| 000006f0:·6520·6b65·726e·656c·2d50·4145·2070·6163··e·kernel-PAE·pac | |||
| 00000700:·6b61·6765·2062·6563·6175·7365·2074·6865··kage·because·the | |||
| 00000710:·2036·342d·6269·740a·7838·3620·6b65·726e···64-bit.x86·kern | |||
| 00000720:·656c·2061·6c72·6561·6479·2069·6e63·6c75··el·already·inclu | |||
| 00000730:·6465·7320·7468·6973·2073·7570·706f·7274··des·this·support | |||
| 00000740:·2e20·486f·7765·7665·722c·2069·6620·7468··.·However,·if·th | |||
| 00000750:·6520·7379·7374·656d·2069·730a·3332·2d62··e·system·is.32-b | |||
| 00000760:·6974·2061·6e64·2061·6c73·6f20·7375·7070··it·and·also·supp | |||
| 00000770:·6f72·7473·2074·6865·2050·4145·2061·6e64··orts·the·PAE·and | |||
| 00000780:·204e·5820·6665·6174·7572·6573·2061·730a···NX·features·as. | |||
| 00000790:·6465·7465·726d·696e·6564·2069·6e20·7468··determined·in·th | |||
| 000007a0:·6520·7072·6576·696f·7573·2073·6563·7469··e·previous·secti | |||
| 000007b0:·6f6e·2c20·7468·6520·6b65·726e·656c·2d50··on,·the·kernel-P | |||
| 000007c0:·4145·2070·6163·6b61·6765·2073·686f·756c··AE·package·shoul | |||
| 000007d0:·640a·6265·2069·6e73·7461·6c6c·6564·2074··d.be·installed·t | |||
| 000007e0:·6f20·656e·6162·6c65·2058·4420·6f72·204e··o·enable·XD·or·N | |||
| 000007f0:·5820·7375·7070·6f72·742e·0a54·6865·203c··X·support..The·< | |||
| 00000800:·636f·6465·3e6b·6572·6e65·6c2d·5041·453c··code>kernel-PAE< | |||
| 00000810:·2f63·6f64·653e·2070·6163·6b61·6765·2063··/code>·package·c | |||
| 00000820:·616e·2062·6520·696e·7374·616c·6c65·6420··an·be·installed· | |||
| 00000830:·7769·7468·2074·6865·2066·6f6c·6c6f·7769··with·the·followi | |||
| 00000840:·6e67·2063·6f6d·6d61·6e64·3a0a·3c70·7265··ng·command:.<pre | |||
| 00000850:·3e0a·2420·7375·646f·2079·756d·2069·6e73··>.$·sudo·yum·ins | |||
| 00000860:·7461·6c6c·206b·6572·6e65·6c2d·5041·453c··tall·kernel-PAE< | |||
| 00000870:·2f70·7265·3e0a·5468·6520·696e·7374·616c··/pre>.The·instal | |||
| 00000880:·6c61·7469·6f6e·2070·726f·6365·7373·2073··lation·process·s | |||
| 00000890:·686f·756c·6420·616c·736f·2068·6176·6520··hould·also·have· | |||
| 000008a0:·636f·6e66·6967·7572·6564·2074·6865·0a62··configured·the.b | |||
| 000008b0:·6f6f·746c·6f61·6465·7220·746f·206c·6f61··ootloader·to·loa | |||
| 000008c0:·6420·7468·6520·6e65·7720·6b65·726e·656c··d·the·new·kernel | |||
| 000008d0:·2061·7420·626f·6f74·2e20·5665·7269·6679···at·boot.·Verify | |||
| 000008e0:·2074·6869·7320·6166·7465·7220·7265·626f···this·after·rebo | |||
| 000008f0:·6f74·0a61·6e64·206d·6f64·6966·7920·3c74··ot.and·modify·<t | |||
| 00000900:·743e·2f65·7463·2f64·6566·6175·6c74·2f67··t>/etc/default/g | |||
| 00000910:·7275·623c·2f74·743e·2069·6620·6e65·6365··rub</tt>·if·nece | |||
| 00000920:·7373·6172·792e·0a20·2020·2020·203c·2f74··ssary..······</t | |||
| 00000930:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00000940:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00000950:·2020·2020·2020·204f·6e20·3332·2d62·6974·········On·32-bit | |||
| 00000960:·2073·7973·7465·6d73·2074·6861·7420·7375···systems·that·su | |||
| 00000970:·7070·6f72·7420·7468·6520·5844·206f·7220··pport·the·XD·or· | |||
| 00000980:·4e58·2062·6974·2c20·7468·6520·7665·6e64··NX·bit,·the·vend | |||
| 00000990:·6f72·2d73·7570·706c·6965·640a·5041·4520··or-supplied.PAE· | |||
| 000009a0:·6b65·726e·656c·2069·7320·7265·7175·6972··kernel·is·requir | |||
| 000009b0:·6564·2074·6f20·656e·6162·6c65·2065·6974··ed·to·enable·eit | |||
| 000009c0:·6865·7220·4578·6563·7574·6520·4469·7361··her·Execute·Disa | |||
| 000009d0:·626c·6520·2858·4429·206f·7220·4e6f·2045··ble·(XD)·or·No·E | |||
| 000009e0:·7865·6375·7465·2028·4e58·2920·7375·7070··xecute·(NX)·supp | |||
| 000009f0:·6f72·742e·0a20·2020·2020·203c·2f74·643e··ort..······</td> | |||
| 00000a00:·0a20·2020·203c·2f74·723e·0a20·2020·203c··.····</tr>.····< | |||
| 00000a10:·7472·3e0a·2020·2020·2020·3c74·643e·5231··tr>.······<td>R1 | |||
| 00000a20:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | |||
| 00000a30:·496e·7374·616c·6c20·7468·6520·6472·6163··Install·the·drac | |||
| 00000a40:·7574·2d66·6970·732d·6165·736e·6920·5061··ut-fips-aesni·Pa | |||
| 00000a50:·636b·6167·653c·2f74·643e·0a20·2020·2020··ckage</td>.····· | |||
| 00000a60:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 00000a70:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | |||
| 00000a80:·6f20·656e·6162·6c65·2046·4950·5320·6f6e··o·enable·FIPS·on | |||
| 00000a90:·2073·7973·7465·6d20·7468·6174·2073·7570···system·that·sup | |||
| 00000aa0:·706f·7274·2074·6865·2041·6476·616e·6365··port·the·Advance | |||
| 00000ab0:·6420·456e·6372·7970·7469·6f6e·2053·7461··d·Encryption·Sta | |||
| 00000ac0:·6e64·6172·6420·2841·4553·2920·6f72·204e··ndard·(AES)·or·N | |||
| 00000ad0:·6577·0a49·6e73·7472·7563·7469·6f6e·7320··ew.Instructions· | |||
| 00000ae0:·2841·4553·2d4e·4929·2065·6e67·696e·652c··(AES-NI)·engine, | |||
| 00000af0:·2074·6865·2073·7973·7465·6d20·7265·7175···the·system·requ | |||
| 00000b00:·6972·6573·2074·6861·7420·7468·6520·3c74··ires·that·the·<t | |||
| 00000b10:·743e·6472·6163·7574·2d66·6970·732d·6165··t>dracut-fips-ae | |||
| 00000b20:·736e·693c·2f74·743e·0a70·6163·6b61·6765··sni</tt>.package | |||
| 00000b30:·2062·6520·696e·7374·616c·6c65·642e·0a54···be·installed..T | |||
| 00000b40:·6865·203c·636f·6465·3e64·7261·6375·742d··he·<code>dracut- | |||
| 00000b50:·6669·7073·2d61·6573·6e69·3c2f·636f·6465··fips-aesni</code | |||
| 00000b60:·3e20·7061·636b·6167·6520·6361·6e20·6265··>·package·can·be | |||
| 00000b70:·2069·6e73·7461·6c6c·6564·2077·6974·6820···installed·with· | |||
| 00000b80:·7468·6520·666f·6c6c·6f77·696e·6720·636f··the·following·co | |||
| 00000b90:·6d6d·616e·643a·0a3c·7072·653e·0a24·2073··mmand:.<pre>.$·s | |||
| 00000ba0:·7564·6f20·7975·6d20·696e·7374·616c·6c20··udo·yum·install· | |||
| 00000bb0:·6472·6163·7574·2d66·6970·732d·6165·736e··dracut-fips-aesn | |||
| Max diff block lines reached; 2911161/2947477 bytes (98.77%) of diff not shown. | |||
| Offset 1, 20 lines modified | Offset 1, 28 lines modified | ||
| 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux | 1 | Rules·with·ANSSI·Reference·in·Guide·to·the·Secure·Configuration·of·Oracle·Linux |
| 2 | 8 | 2 | 8 |
| 3 | ···········································································Use·of·a·64-bit·operating·system | ||
| 4 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 5 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 6 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 7 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 8 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 9 | ······························ | 3 | ······························The·SMEP·is·used·to·prevent·the·supervisor |
| 4 | ······························mode·from·executing·user·space·code,·it·is | ||
| 5 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 6 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 7 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 8 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 9 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 10 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 11 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 12 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 13 | ······························argument·nosmep.·Run·the·following·command | ||
| 14 | ······························to·update·command·line·for·already·installed | ||
| 15 | ······························kernels: | ||
| 16 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 17 | ······························args="nosmep" | ||
| 10 | ······························Systems·that·are·using·the·64-bit·x86·kernel | 18 | ······························Systems·that·are·using·the·64-bit·x86·kernel |
| 11 | ······························package·do·not·need·to·install·the·kernel- | 19 | ······························package·do·not·need·to·install·the·kernel- |
| 12 | ······························PAE·package·because·the·64-bit·x86·kernel | 20 | ······························PAE·package·because·the·64-bit·x86·kernel |
| 13 | ······························already·includes·this·support.·However,·if | 21 | ······························already·includes·this·support.·However,·if |
| 14 | ······························the·system·is·32-bit·and·also·supports·the | 22 | ······························the·system·is·32-bit·and·also·supports·the |
| 15 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD | 23 | ······························PAE·and·NX·features·as·determined·in·the·····On·32-bit·systems·that·support·the·XD |
| 16 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE | 24 | ····Install·PAE·Kernel·on·····previous·section,·the·kernel-PAE·package·····or·NX·bit,·the·vendor-supplied·PAE |
| Offset 22, 14 lines modified | Offset 30, 21 lines modified | ||
| 22 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute | 30 | ····Systems···················support.·The·kernel-PAE·package·can·be·······Execute·Disable·(XD)·or·No·Execute |
| 23 | ······························installed·with·the·following·command:········(NX)·support. | 31 | ······························installed·with·the·following·command:········(NX)·support. |
| 24 | ······························$·sudo·yum·install·kernel-PAE | 32 | ······························$·sudo·yum·install·kernel-PAE |
| 25 | ······························The·installation·process·should·also·have | 33 | ······························The·installation·process·should·also·have |
| 26 | ······························configured·the·bootloader·to·load·the·new | 34 | ······························configured·the·bootloader·to·load·the·new |
| 27 | ······························kernel·at·boot.·Verify·this·after·reboot·and | 35 | ······························kernel·at·boot.·Verify·this·after·reboot·and |
| 28 | ······························modify·/etc/default/grub·if·necessary. | 36 | ······························modify·/etc/default/grub·if·necessary. |
| 37 | ···········································································Use·of·a·64-bit·operating·system | ||
| 38 | ···········································································offers·a·few·advantages,·like·a·larger | ||
| 39 | ····Prefer·to·use·a·64-bit····Prefer·installation·of·64-bit·operating······address·space·range·for·Address·Space | ||
| 40 | R1··Operating·System·when·····systems·when·the·CPU·supports·it.············Layout·Randomization·(ASLR)·and | ||
| 41 | ····supported······························································systematic·presence·of·No·eXecute·and | ||
| 42 | ···········································································Execute·Disable·(NX/XD)·protection | ||
| 43 | ···········································································bits. | ||
| 29 | ···········································································Use·of·weak·or·untested·encryption | 44 | ···········································································Use·of·weak·or·untested·encryption |
| 30 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of | 45 | ······························To·enable·FIPS·on·system·that·support·the····algorithms·undermines·the·purposes·of |
| 31 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. | 46 | ······························Advanced·Encryption·Standard·(AES)·or·New····utilizing·encryption·to·protect·data. |
| 32 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement | 47 | ····Install·the·dracut-fips-··Instructions·(AES-NI)·engine,·the·system·····The·operating·system·must·implement |
| 33 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the | 48 | R1··aesni·Package·············requires·that·the·dracut-fips-aesni·package··cryptographic·modules·adhering·to·the |
| 34 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the | 49 | ······························be·installed.·The·dracut-fips-aesni·package··higher·standards·approved·by·the |
| 35 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides | 50 | ······························can·be·installed·with·the·following·command:·federal·government·since·this·provides |
| Offset 47, 29 lines modified | Offset 62, 14 lines modified | ||
| 47 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. | 62 | ······························GRUB_CMDLINE_LINUX="..."·····················of·data·in·the·user·space. |
| 48 | ······························within·/etc/default/grub·doesn't·contain·the | 63 | ······························within·/etc/default/grub·doesn't·contain·the |
| 49 | ······························argument·nosmap.·Run·the·following·command | 64 | ······························argument·nosmap.·Run·the·following·command |
| 50 | ······························to·update·command·line·for·already·installed | 65 | ······························to·update·command·line·for·already·installed |
| 51 | ······························kernels: | 66 | ······························kernels: |
| 52 | ······························#·grubby·--update-kernel=ALL·--remove- | 67 | ······························#·grubby·--update-kernel=ALL·--remove- |
| 53 | ······························args="nosmap" | 68 | ······························args="nosmap" |
| 54 | ······························The·SMEP·is·used·to·prevent·the·supervisor | ||
| 55 | ······························mode·from·executing·user·space·code,·it·is | ||
| 56 | ······························enabled·by·default·since·Linux·kernel·3.0. | ||
| 57 | ······························But·it·could·be·disabled·through·kernel·boot | ||
| 58 | ······························parameters.·Ensure·that·Supervisor·Mode | ||
| 59 | ······························Execution·Prevention·(SMEP)·is·not·disabled··Disabling·SMEP·can·facilitate | ||
| 60 | ····Ensure·SMEP·is·not········by·the·nosmep·boot·paramenter·option.·Check··exploitation·of·certain | ||
| 61 | R1··disabled·during·boot······that·the·line································vulnerabilities·because·it·allows·the | ||
| 62 | ······························GRUB_CMDLINE_LINUX="..."·····················kernel·to·unintentionally·execute·code | ||
| 63 | ······························within·/etc/default/grub·doesn't·contain·the·in·less·privileged·memory·space. | ||
| 64 | ······························argument·nosmep.·Run·the·following·command | ||
| 65 | ······························to·update·command·line·for·already·installed | ||
| 66 | ······························kernels: | ||
| 67 | ······························#·grubby·--update-kernel=ALL·--remove- | ||
| 68 | ······························args="nosmep" | ||
| 69 | ······························The·grub2·boot·loader·should·have·a | 69 | ······························The·grub2·boot·loader·should·have·a |
| 70 | ······························superuser·account·and·password·protection | 70 | ······························superuser·account·and·password·protection |
| 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader | 71 | ······························enabled·to·protect·boot-time·settings.·······Password·protection·on·the·boot·loader |
| 72 | ···········································································configuration·ensures·users·with | 72 | ···········································································configuration·ensures·users·with |
| 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter | 73 | ····Set·the·UEFI·Boot·Loader··Since·plaintext·passwords·are·a·security·····physical·access·cannot·trivially·alter |
| 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These | 74 | R5··Password··················risk,·generate·a·hash·for·the·password·by····important·bootloader·settings.·These |
| 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and | 75 | ······························running·the·following·command:···············include·which·kernel·to·use,·and |
| Offset 133, 45 lines modified | Offset 133, 73 lines modified | ||
| 133 | ······························default/grub·as·shown·below: | 133 | ······························default/grub·as·shown·below: |
| 134 | ······························GRUB_CMDLINE_LINUX="... | 134 | ······························GRUB_CMDLINE_LINUX="... |
| 135 | ······························rng_core.default_quality=500·..." | 135 | ······························rng_core.default_quality=500·..." |
| 136 | ······························Run·the·following·command·to·update·command | 136 | ······························Run·the·following·command·to·update·command |
| 137 | ······························line·for·already·installed·kernels: | 137 | ······························line·for·already·installed·kernels: |
| 138 | ······························#·grubby·--update-kernel=ALL·-- | 138 | ······························#·grubby·--update-kernel=ALL·-- |
| 139 | ······························args="rng_core.default_quality=500" | 139 | ······························args="rng_core.default_quality=500" |
| 140 | ······························L1·Terminal·Fault·(L1TF)·is·a·hardware | ||
| 141 | ······························vulnerability·which·allows·unprivileged | ||
| 142 | ······························speculative·access·to·data·which·is | ||
| 143 | ······························available·in·the·Level·1·Data·Cache·when·the | ||
| 144 | ······························page·table·entry·isn't·present.·Select·the | ||
| 145 | ······························appropriate·mitigation·by·adding·the | ||
| 146 | ······························argument·l1tf=flush·to·the·default·GRUB·2 | ||
| 147 | ······························command·line·for·the·Linux·operating·system. | ||
| 148 | ······························To·ensure·that·l1tf=flush·is·added·as·a······The·L1TF·vulnerability·allows·an | ||
| 149 | ······························kernel·command·line·argument·to·newly········attacker·to·bypass·memory·access | ||
| 150 | ····Configure·L1·Terminal·····installed·kernels,·add·l1tf=flush·to·the·····security·controls·imposed·by·the | ||
| 151 | 140 | ······························Spectre·V2·is·an·indirect·branch·poisoning | |
| 141 | ······························attack·that·can·lead·to·data·leakage.·An | ||
| 142 | ······························exploit·for·Spectre·V2·tricks·the·indirect | ||
| 143 | ······························branch·predictor·into·executing·code·from·a | ||
| 144 | ······························future·indirect·branch·chosen·by·the | ||
| 145 | ······························attacker,·even·if·the·privilege·level·is | ||
| 146 | ······························different.·Since·Linux·Kernel·4.15·you·can | ||
| 147 | ······························check·the·Spectre·V2·mitigation·state·with | ||
| 148 | ······························the·following·command:·cat·/sys/devices/ | ||
| 149 | ······························system/cpu/vulnerabilities/spectre_v2 | ||
| 150 | ······························Enforce·the·Spectre·V2·mitigation·by·adding··The·Spectre·V2·vulnerability·allows·an | ||
| 151 | R8··Enforce·Spectre·v2········the·argument·spectre_v2=on·to·the·default····attacker·to·read·memory·that·he·should | ||
| 152 | ····mitigation················GRUB·2·command·line·for·the·Linux·operating··not·have·access·to. | ||
| 153 | ······························system.·To·ensure·that·spectre_v2=on·is | ||
| 154 | ······························added·as·a·kernel·command·line·argument·to | ||
| 155 | ······························newly·installed·kernels,·add·spectre_v2=on | ||
| 156 | ······························to·the·default·Grub2·command·line·for·Linux | ||
| 152 | ······························operating·systems.·Modify·the·line·within·/ | 157 | ······························operating·systems.·Modify·the·line·within·/ |
| 153 | ······························etc/default/grub·as·shown·below:·············any·physical·memory·location·that·is | ||
| 154 | ······························ | 158 | ······························etc/default/grub·as·shown·below: |
| 159 | ······························GRUB_CMDLINE_LINUX="...·spectre_v2=on·..." | ||
| 155 | ······························Run·the·following·command·to·update·command | 160 | ······························Run·the·following·command·to·update·command |
| Max diff block lines reached; 657495/668223 bytes (98.39%) of diff not shown. | |||
| Offset 61, 48 lines modified | Offset 61, 36 lines modified | ||
| 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 65 | ······</td> |
| 66 | ····</tr> | 66 | ····</tr> |
| 67 | ····<tr> | 67 | ····<tr> |
| 68 | ······<td>3.1.1</td> | ||
| 69 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 72 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 73 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 74 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 76 | <pre>[daemon] | ||
| 77 | AutomaticLoginEnable=false</pre> | ||
| 78 | ······</td> | ||
| 79 | ······<td·xml:lang="en-US"> | ||
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 81 | system·security. | ||
| 82 | ······</td> | ||
| 83 | ····</tr> | ||
| 84 | ····<tr> | ||
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 86 | ······<td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 87 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 88 | ········If·an·account·is·configured·for·password·authentication | ||
| 89 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 90 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 91 | 71 | ········Disallow·SSH·login·with·empty·passwords. | |
| 72 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 73 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 74 | <br·/> | ||
| 75 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 76 | add·or·correct·the·following·line·in | ||
| 92 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 93 | <tt>/etc/pam.d/password-auth</tt> | ||
| 94 | 77 | <tt>/etc/ssh/sshd_config</tt>: | |
| 78 | <br·/> | ||
| 79 | <pre>PermitEmptyPasswords·no</pre> | ||
| 80 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 81 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 95 | ······</td> | 82 | ······</td> |
| 96 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 99 | 84 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | |
| 85 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 86 | misconfiguration·elsewhere. | ||
| 100 | ······</td> | 87 | ······</td> |
| 101 | ····</tr> | 88 | ····</tr> |
| 102 | ····<tr> | 89 | ····<tr> |
| 103 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 104 | ······<td>Restrict·Serial·Port·Root·Logins</td> | 91 | ······<td>Restrict·Serial·Port·Root·Logins</td> |
| 105 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 106 | ········To·restrict·root·logins·on·serial·ports, | 93 | ········To·restrict·root·logins·on·serial·ports, |
| Offset 130, 57 lines modified | Offset 118, 86 lines modified | ||
| 130 | ······</td> | 118 | ······</td> |
| 131 | ······<td·xml:lang="en-US"> | 119 | ······<td·xml:lang="en-US"> |
| 132 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 120 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 133 | system·security. | 121 | system·security. |
| 134 | ······</td> | 122 | ······</td> |
| 135 | ····</tr> | 123 | ····</tr> |
| 136 | ····<tr> | 124 | ····<tr> |
| 125 | ······<td>3.1.1</td> | ||
| 126 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 127 | ······<td·xml:lang="en-US"> | ||
| 128 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 129 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 130 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 131 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 132 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 133 | <pre>[daemon] | ||
| 134 | AutomaticLoginEnable=false</pre> | ||
| 135 | ······</td> | ||
| 136 | ······<td·xml:lang="en-US"> | ||
| 137 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 138 | system·security. | ||
| 139 | ······</td> | ||
| 140 | ····</tr> | ||
| 141 | ····<tr> | ||
| 137 | ······<td>3.1.1<br/>3.1.5</td> | 142 | ······<td>3.1.1<br/>3.1.5</td> |
| 138 | ······<td> | 143 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 139 | ······<td·xml:lang="en-US"> | 144 | ······<td·xml:lang="en-US"> |
| 145 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 146 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 147 | <pre>vc/1 | ||
| 148 | vc/2 | ||
| 149 | vc/3 | ||
| 150 | vc/4</pre> | ||
| 140 | ········Disallow·SSH·login·with·empty·passwords. | ||
| 141 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 142 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 143 | <br·/> | ||
| 144 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 145 | add·or·correct·the·following·line·in | ||
| 146 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 147 | <br·/> | ||
| 148 | <pre>PermitEmptyPasswords·no</pre> | ||
| 149 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 150 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 151 | ······</td> | 151 | ······</td> |
| 152 | ······<td·xml:lang="en-US"> | 152 | ······<td·xml:lang="en-US"> |
| 153 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | ||
| 154 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 155 | 153 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 154 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 155 | using·the·root·account. | ||
| 156 | ······</td> | 156 | ······</td> |
| 157 | ····</tr> | 157 | ····</tr> |
| 158 | ····<tr> | 158 | ····<tr> |
| 159 | ······<td>3.1.1<br/>3.4.5</td> | 159 | ······<td>3.1.1<br/>3.4.5</td> |
| 160 | ······<td>Require·Authentication·for· | 160 | ······<td>Require·Authentication·for·Single·User·Mode</td> |
| 161 | ······<td·xml:lang="en-US"> | 161 | ······<td·xml:lang="en-US"> |
| 162 | ········ | 162 | ········Single-user·mode·is·intended·as·a·system·recovery |
| 163 | method,·providing·a·single·user·root·access·to·the·system | 163 | method,·providing·a·single·user·root·access·to·the·system·by |
| 164 | 164 | providing·a·boot·option·at·startup. | |
| 165 | <br·/><br·/> | 165 | <br·/><br·/> |
| 166 | By·default,· | 166 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set |
| 167 | in·<tt>/usr/lib/systemd/system/ | 167 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. |
| Max diff block lines reached; 450496/456398 bytes (98.71%) of diff not shown. | |||
| Offset 66, 15094 lines modified | Offset 66, 15094 lines modified | ||
| 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | 00000410:·0a20·2020·203c·7468·3e52·6174·696f·6e61··.····<th>Rationa | ||
| 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | 00000420:·6c65·3c2f·7468·3e0a·2020·3c2f·7468·6561··le</th>.··</thea | ||
| 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | 00000430:·643e·0a20·203c·7462·6f64·793e·0a20·203c··d>.··<tbody>.··< | ||
| 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | 00000440:·7472·3e0a·2020·2020·2020·3c74·643e·4155··tr>.······<td>AU | ||
| 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | 00000450:·2d32·2864·293c·6272·2f3e·4155·2d31·3228··-2(d)<br/>AU-12( | ||
| 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | 00000460:·6329·3c62·722f·3e41·432d·3628·3929·3c62··c)<br/>AC-6(9)<b | Diff chunk too large, falling back to line-by-line diff (1379 lines added, 1379 lines removed) | |
| 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | 00000470:·722f·3e43·4d2d·3628·6129·3c2f·7464·3e0a··r/>CM-6(a)</td>. | ||
| 00000480:·2020·2020·2020·3c74·643e· | 00000480:·2020·2020·2020·3c74·643e·5265·636f·7264········<td>Record | ||
| 00000490:·20 | 00000490:·2041·6e79·2041·7474·656d·7074·7320·746f···Any·Attempts·to | ||
| 000004a0:·20 | 000004a0:·2052·756e·2063·6863·6f6e·3c2f·7464·3e0a···Run·chcon</td>. | ||
| 000004b0:· | 000004b0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | ||
| 000004c0:·6 | 000004c0:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | ||
| 000004d0:·20 | 000004d0:·2020·2020·4174·2061·206d·696e·696d·756d······At·a·minimum | ||
| 000004e0:·2 | 000004e0:·2c20·7468·6520·6175·6469·7420·7379·7374··,·the·audit·syst | ||
| 000004f0:·6 | 000004f0:·656d·2073·686f·756c·6420·636f·6c6c·6563··em·should·collec | ||
| 00000500:· | 00000500:·7420·616e·7920·6578·6563·7574·696f·6e20··t·any·execution· | ||
| 00000510:· | 00000510:·6174·7465·6d70·740a·6f66·2074·6865·203c··attempt.of·the·< | ||
| 00000520:· | 00000520:·7474·3e63·6863·6f6e·3c2f·7474·3e20·636f··tt>chcon</tt>·co | ||
| 00000530:· | 00000530:·6d6d·616e·6420·666f·7220·616c·6c20·7573··mmand·for·all·us | ||
| 00000540:·6 | 00000540:·6572·7320·616e·6420·726f·6f74·2e20·4966··ers·and·root.·If | ||
| 00000550:· | 00000550:·2074·6865·203c·7474·3e61·7564·6974·643c···the·<tt>auditd< | ||
| 00000560:· | 00000560:·2f74·743e·0a64·6165·6d6f·6e20·6973·2063··/tt>.daemon·is·c | ||
| 00000570:·6 | 00000570:·6f6e·6669·6775·7265·6420·746f·2075·7365··onfigured·to·use | ||
| 00000580:· | 00000580:·2074·6865·203c·7474·3e61·7567·656e·7275···the·<tt>augenru | ||
| 00000590:·6 | 00000590:·6c65·733c·2f74·743e·2070·726f·6772·616d··les</tt>·program | ||
| 000005a0:· | 000005a0:·2074·6f20·7265·6164·2061·7564·6974·2072···to·read·audit·r | ||
| 000005b0:·756c·6573· | 000005b0:·756c·6573·0a64·7572·696e·6720·6461·656d··ules.during·daem | ||
| 000005c0:·6 | 000005c0:·6f6e·2073·7461·7274·7570·2028·7468·6520··on·startup·(the· | ||
| 000005d0:· | 000005d0:·6465·6661·756c·7429·2c20·6164·6420·7468··default),·add·th | ||
| 000005e0:·6 | 000005e0:·6520·666f·6c6c·6f77·696e·6720·6c69·6e65··e·following·line | ||
| 000005f0:· | 000005f0:·7320·746f·2061·2066·696c·6520·7769·7468··s·to·a·file·with | ||
| 00000600:·20 | 00000600:·2073·7566·6669·780a·3c74·743e·2e72·756c···suffix.<tt>.rul | ||
| 00000610:·6 | 00000610:·6573·3c2f·7474·3e20·696e·2074·6865·2064··es</tt>·in·the·d | ||
| 00000620:· | 00000620:·6972·6563·746f·7279·203c·7474·3e2f·6574··irectory·<tt>/et | ||
| 00000630:· | 00000630:·632f·6175·6469·742f·7275·6c65·732e·643c··c/audit/rules.d< | ||
| 00000640:· | 00000640:·2f74·743e·3a0a·3c70·7265·3e2d·6120·616c··/tt>:.<pre>-a·al | ||
| 00000650:·7 | 00000650:·7761·7973·2c65·7869·7420·2d46·2070·6174··ways,exit·-F·pat | ||
| 00000660:· | 00000660:·683d·2f75·7372·2f62·696e·2f63·6863·6f6e··h=/usr/bin/chcon | ||
| 00000670:· | 00000670:·202d·4620·7065·726d·3d78·202d·4620·6175···-F·perm=x·-F·au | ||
| 00000680:· | 00000680:·6964·2667·743b·3d31·3030·3020·2d46·2061··id>=1000·-F·a | ||
| 00000690:· | 00000690:·7569·6421·3d75·6e73·6574·202d·4620·6b65··uid!=unset·-F·ke | ||
| 000006a0:· | 000006a0:·793d·7072·6976·696c·6567·6564·3c2f·7072··y=privileged</pr | ||
| 000006b0:·6 | 000006b0:·653e·0a49·6620·7468·6520·3c74·743e·6175··e>.If·the·<tt>au | ||
| 000006c0:·6 | 000006c0:·6469·7464·3c2f·7474·3e20·6461·656d·6f6e··ditd</tt>·daemon | ||
| 000006d0:· | 000006d0:·2069·7320·636f·6e66·6967·7572·6564·2074···is·configured·t | ||
| 000006e0:· | 000006e0:·6f20·7573·6520·7468·6520·3c74·743e·6175··o·use·the·<tt>au | ||
| 000006f0:·6974· | 000006f0:·6469·7463·746c·3c2f·7474·3e0a·7574·696c··ditctl</tt>.util | ||
| 00000700:·697 | 00000700:·6974·7920·746f·2072·6561·6420·6175·6469··ity·to·read·audi | ||
| 00000710:· | 00000710:·7420·7275·6c65·7320·6475·7269·6e67·2064··t·rules·during·d | ||
| 00000720:·6 | 00000720:·6165·6d6f·6e20·7374·6172·7475·702c·2061··aemon·startup,·a | ||
| 00000730:· | 00000730:·6464·2074·6865·2066·6f6c·6c6f·7769·6e67··dd·the·following | ||
| 00000740:·20 | 00000740:·206c·696e·6573·2074·6f0a·3c74·743e·2f65···lines·to.<tt>/e | ||
| 00000750:· | 00000750:·7463·2f61·7564·6974·2f61·7564·6974·2e72··tc/audit/audit.r | ||
| 00000760:· | 00000760:·756c·6573·3c2f·7474·3e20·6669·6c65·3a0a··ules</tt>·file:. | ||
| 00000770:· | 00000770:·3c70·7265·3e2d·6120·616c·7761·7973·2c65··<pre>-a·always,e | ||
| 00000780:· | 00000780:·7869·7420·2d46·2070·6174·683d·2f75·7372··xit·-F·path=/usr | ||
| 00000790:·2f6 | 00000790:·2f62·696e·2f63·6863·6f6e·202d·4620·7065··/bin/chcon·-F·pe | ||
| 000007a0:· | 000007a0:·726d·3d78·202d·4620·6175·6964·2667·743b··rm=x·-F·auid> | ||
| 000007b0:· | 000007b0:·3d31·3030·3020·2d46·2061·7569·6421·3d75··=1000·-F·auid!=u | ||
| 000007c0:· | 000007c0:·6e73·6574·202d·4620·6b65·793d·7072·6976··nset·-F·key=priv | ||
| 000007d0:· | 000007d0:·696c·6567·6564·3c2f·7072·653e·0a20·2020··ileged</pre>.··· | ||
| 000007e0:· | 000007e0:·2020·203c·2f74·643e·0a20·2020·2020·203c·····</td>.······< | ||
| 000007f0:· | 000007f0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000800:· | 00000800:·5553·223e·0a20·2020·2020·2020·204d·6973··US">.········Mis | ||
| 00000810:·7 | 00000810:·7573·6520·6f66·2070·7269·7669·6c65·6765··use·of·privilege | ||
| 00000820:· | 00000820:·6420·6675·6e63·7469·6f6e·732c·2065·6974··d·functions,·eit | ||
| 00000830:·6 | 00000830:·6865·7220·696e·7465·6e74·696f·6e61·6c6c··her·intentionall | ||
| 00000840:· | 00000840:·7920·6f72·2075·6e69·6e74·656e·7469·6f6e··y·or·unintention | ||
| 00000850:· | 00000850:·616c·6c79·2062·790a·6175·7468·6f72·697a··ally·by.authoriz | ||
| 00000860:·6 | 00000860:·6564·2075·7365·7273·2c20·6f72·2062·7920··ed·users,·or·by· | ||
| 00000870:· | 00000870:·756e·6175·7468·6f72·697a·6564·2065·7874··unauthorized·ext | ||
| 00000880:·6 | 00000880:·6572·6e61·6c20·656e·7469·7469·6573·2074··ernal·entities·t | ||
| 00000890:·6 | 00000890:·6861·7420·6861·7665·2063·6f6d·7072·6f6d··hat·have·comprom | ||
| 000008a0:· | 000008a0:·6973·6564·2073·7973·7465·6d20·6163·636f··ised·system·acco | ||
| 000008b0:·6 | 000008b0:·756e·7473·2c0a·6973·2061·2073·6572·696f··unts,.is·a·serio | ||
| 000008c0:·7 | 000008c0:·7573·2061·6e64·206f·6e67·6f69·6e67·2063··us·and·ongoing·c | ||
| 000008d0:· | 000008d0:·6f6e·6365·726e·2061·6e64·2063·616e·2068··oncern·and·can·h | ||
| 000008e0:· | 000008e0:·6176·6520·7369·676e·6966·6963·616e·7420··ave·significant· | ||
| 000008f0:· | 000008f0:·6164·7665·7273·6520·696d·7061·6374·7320··adverse·impacts· | ||
| 00000900:·6 | 00000900:·6f6e·206f·7267·616e·697a·6174·696f·6e73··on·organizations | ||
| 00000910:· | 00000910:·2e0a·4175·6469·7469·6e67·2074·6865·2075··..Auditing·the·u | ||
| 00000920:· | 00000920:·7365·206f·6620·7072·6976·696c·6567·6564··se·of·privileged | ||
| 00000930:· | 00000930:·2066·756e·6374·696f·6e73·2069·7320·6f6e···functions·is·on | ||
| 00000940:·6 | 00000940:·6520·7761·7920·746f·2064·6574·6563·7420··e·way·to·detect· | ||
| 00000950:·6 | 00000950:·7375·6368·206d·6973·7573·6520·616e·6420··such·misuse·and· | ||
| 00000960:·69 | 00000960:·6964·656e·7469·6679·0a74·6865·2072·6973··identify.the·ris | ||
| 00000970:·6 | 00000970:·6b20·6672·6f6d·2069·6e73·6964·6572·2061··k·from·insider·a | ||
| 00000980:· | 00000980:·6e64·2061·6476·616e·6365·6420·7065·7273··nd·advanced·pers | ||
| 00000990:· | 00000990:·6973·7465·6e74·2074·6872·6561·7473·2e0a··istent·threats.. | ||
| 000009a0:· | 000009a0:·3c62·7220·2f3e·3c62·7220·2f3e·0a50·7269··<br·/><br·/>.Pri | ||
| 000009b0:· | 000009b0:·7669·6c65·6765·6420·7072·6f67·7261·6d73··vileged·programs | ||
| 000009c0:· | 000009c0:·2061·7265·2073·7562·6a65·6374·2074·6f20···are·subject·to· | ||
| 000009d0:·6 | 000009d0:·6573·6361·6c61·7469·6f6e·2d6f·662d·7072··escalation-of-pr | ||
| 000009e0:· | 000009e0:·6976·696c·6567·6520·6174·7461·636b·732c··ivilege·attacks, | ||
| 000009f0:· | 000009f0:·0a77·6869·6368·2061·7474·656d·7074·2074··.which·attempt·t | ||
| 00000a00:·6 | 00000a00:·6f20·7375·6276·6572·7420·7468·6569·7220··o·subvert·their· | ||
| 00000a10:·6 | 00000a10:·6e6f·726d·616c·2072·6f6c·6520·6f66·2070··normal·role·of·p | ||
| 00000a20:· | 00000a20:·726f·7669·6469·6e67·2073·6f6d·6520·6e65··roviding·some·ne | ||
| 00000a30:· | 00000a30:·6365·7373·6172·7920·6275·740a·6c69·6d69··cessary·but.limi | ||
| 00000a40:·74 | 00000a40:·7465·6420·6361·7061·6269·6c69·7479·2e20··ted·capability.· | ||
| 00000a50:· | 00000a50:·4173·2073·7563·682c·206d·6f74·6976·6174··As·such,·motivat | ||
| 00000a60:· | 00000a60:·696f·6e20·6578·6973·7473·2074·6f20·6d6f··ion·exists·to·mo | ||
| 00000a70:·6 | 00000a70:·6e69·746f·7220·7468·6573·6520·7072·6f67··nitor·these·prog | ||
| 00000a80:· | 00000a80:·7261·6d73·2066·6f72·0a75·6e75·7375·616c··rams·for.unusual | ||
| 00000a90:·206 | 00000a90:·2061·6374·6976·6974·792e·0a20·2020·2020···activity..····· | ||
| 00000aa0:· | 00000aa0:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | ||
| 00000ab0:· | 00000ab0:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | ||
| 00000ac0:· | 00000ac0:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000ad0:· | 00000ad0:·4155·2d31·3228·6329·3c62·722f·3e43·4d2d··AU-12(c)<br/>CM- | ||
| 00000ae0:· | 00000ae0:·3628·6129·3c2f·7464·3e0a·2020·2020·2020··6(a)</td>.······ | ||
| 00000af0:·3 | 00000af0:·3c74·643e·5265·636f·7264·2055·6e73·7563··<td>Record·Unsuc | ||
| 00000b00:· | 00000b00:·6365·7373·6675·6c20·4465·6c65·7465·2041··cessful·Delete·A | ||
| 00000b10:· | 00000b10:·7474·656d·7074·7320·746f·2046·696c·6573··ttempts·to·Files | ||
| 00000b20:· | 00000b20:·202d·2075·6e6c·696e·6b3c·2f74·643e·0a20···-·unlink</td>.· | ||
| 00000b30:· | 00000b30:·2020·2020·203c·7464·2078·6d6c·3a6c·616e·······<td·xml:lan | ||
| 00000b40:·6 | 00000b40:·673d·2265·6e2d·5553·223e·0a20·2020·2020··g="en-US">.····· | ||
| 00000b50:·2 | 00000b50:·2020·200a·5468·6520·6175·6469·7420·7379·····.The·audit·sy | ||
| 00000b60:· | 00000b60:·7374·656d·2073·686f·756c·6420·636f·6c6c··stem·should·coll | ||
| 00000b70:· | 00000b70:·6563·7420·756e·7375·6363·6573·7366·756c··ect·unsuccessful | ||
| 00000b80:·20 | 00000b80:·2066·696c·6520·6465·6c65·7469·6f6e·0a61···file·deletion.a | ||
| 00000b90:· | 00000b90:·7474·656d·7074·7320·666f·7220·616c·6c20··ttempts·for·all· | ||
| 00000ba0:· | 00000ba0:·7573·6572·7320·616e·6420·726f·6f74·2e20··users·and·root.· | ||
| 00000bb0:·2074·6865·20 | 00000bb0:·4966·2074·6865·203c·7474·3e61·7564·6974··If·the·<tt>audit | ||
| 00000bc0:·6 | 00000bc0:·643c·2f74·743e·2064·6165·6d6f·6e20·6973··d</tt>·daemon·is | ||
| 00000bd0:·206 | 00000bd0:·2063·6f6e·6669·6775·7265·640a·746f·2075···configured.to·u | ||
| 00000be0:· | 00000be0:·7365·2074·6865·203c·7474·3e61·7567·656e··se·the·<tt>augen | ||
| Max diff block lines reached; 7105707/7296587 bytes (97.38%) of diff not shown. | |||
| Offset 127, 26 lines modified | Offset 127, 14 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 147 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 150 | modify·the·following·line·in | 138 | modify·the·following·line·in |
| 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 152 | <pre>DefaultZone=drop</pre> | 140 | <pre>DefaultZone=drop</pre> |
| Offset 156, 14 lines modified | Offset 144, 26 lines modified | ||
| 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 146 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 147 | accepted. |
| 160 | ······</td> | 148 | ······</td> |
| 161 | ····</tr> | 149 | ····</tr> |
| 162 | ····<tr> | 150 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | 166 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 168 | network. | 168 | network. |
| 169 | ······</td> | 169 | ······</td> |
| Offset 246, 14 lines modified | Offset 246, 41 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 260 | log·size,·although·some·activity·would·not·be·logged. | ||
| 261 | ······</td> | ||
| 262 | ····</tr> | ||
| 263 | ····<tr> | ||
| 264 | ······<td>Req-1.4.3</td> | ||
| 265 | ······<td>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</td> | ||
| 266 | ······<td·xml:lang="en-US"> | ||
| 267 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_echo_ignore_broadcasts</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_echo_ignore_broadcasts=1</pre> | ||
| 268 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_echo_ignore_broadcasts·=·1</pre> | ||
| 269 | ······</td> | ||
| 270 | ······<td·xml:lang="en-US"> | ||
| 271 | ········Responding·to·broadcast·(ICMP)·echoes·facilitates·network·mapping | ||
| 272 | and·provides·a·vector·for·amplification·attacks. | ||
| 273 | <br·/> | ||
| 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | ||
| 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | ||
| 276 | ······</td> | ||
| 277 | ····</tr> | ||
| 278 | ····<tr> | ||
| 279 | ······<td>Req-1.4.3</td> | ||
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 254 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 257 | ······</td> | 284 | ······</td> |
| 258 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers |
| Offset 277, 22 lines modified | Offset 304, 25 lines modified | ||
| 277 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as | 304 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as |
| 278 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is | 305 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is |
| 279 | absolutely·required. | 306 | absolutely·required. |
| 280 | ······</td> | 307 | ······</td> |
| 281 | ····</tr> | 308 | ····</tr> |
| 282 | ····<tr> | 309 | ····<tr> |
| 283 | ······<td>Req-1.4.3</td> | 310 | ······<td>Req-1.4.3</td> |
| 284 | ······<td>Enable·Kernel·Parameter·to· | 311 | ······<td>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</td> |
| 285 | ······<td·xml:lang="en-US"> | 312 | ······<td·xml:lang="en-US"> |
| 286 | ········To·set·the·runtime·status·of·the·<code>net.ipv4. | 313 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.rp_filter</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1</pre> |
| 287 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4. | 314 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.conf.all.rp_filter·=·1</pre> |
| 288 | ······</td> | 315 | ······</td> |
| 289 | ······<td·xml:lang="en-US"> | 316 | ······<td·xml:lang="en-US"> |
| 290 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 291 | l | 317 | ········Enabling·reverse·path·filtering·drops·packets·with·source·addresses |
| 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | ||
| 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | ||
| 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | ||
| 321 | networks. | ||
| 292 | ······</td> | 322 | ······</td> |
| 293 | ····</tr> | 323 | ····</tr> |
| 294 | ····<tr> | 324 | ····<tr> |
| 295 | ······<td>Req-1.4.3</td> | 325 | ······<td>Req-1.4.3</td> |
| 296 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> | 326 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> |
| 297 | ······<td·xml:lang="en-US"> | 327 | ······<td·xml:lang="en-US"> |
| 298 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> | 328 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> |
| Offset 304, 44 lines modified | Offset 334, 14 lines modified | ||
| 304 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | 334 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect |
| 305 | message·could·result·in·a·man-in-the-middle·attack. | 335 | message·could·result·in·a·man-in-the-middle·attack. |
| 306 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should | 336 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should |
| 307 | be·disabled·unless·absolutely·required. | 337 | be·disabled·unless·absolutely·required. |
| Max diff block lines reached; 292529/299345 bytes (97.72%) of diff not shown. | |||
| Offset 90, 21 lines modified | Offset 90, 14 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 104 | ····················································································In·firewalld·the | 97 | ····················································································In·firewalld·the |
| 105 | ····················································································default·zone·is | 98 | ····················································································default·zone·is |
| 106 | ····················································································applied·only·after | 99 | ····················································································applied·only·after |
| 107 | ····················································································all·the·applicable | 100 | ····················································································all·the·applicable |
| 108 | ····················································································rules·in·the·table | 101 | ····················································································rules·in·the·table |
| 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 112, 14 lines modified | Offset 105, 21 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 106 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 107 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 108 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 109 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 110 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 111 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································Loopback·traffic·is | 119 | ····················································································Loopback·traffic·is |
| 120 | ····················································································generated·between | 120 | ····················································································generated·between |
| 121 | ····················································································processes·on | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | 122 | ····················································································machine·and·is |
| 123 | ····················································································typically·critical | 123 | ····················································································typically·critical |
| 124 | ····················································································to·operation·of·the | 124 | ····················································································to·operation·of·the |
| 125 | ····················································································system.·The | 125 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 228, 23 lines modified | Offset 253, 32 lines modified | ||
| 228 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as | 253 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as |
| 229 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) | 254 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) |
| 230 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate | 255 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate |
| 231 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be | 256 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be |
| 232 | ·····························sysctl.d:··············································disabled·unless·it | 257 | ·····························sysctl.d:··············································disabled·unless·it |
| 233 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely | 258 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely |
| 234 | ····················································································required. | 259 | ····················································································required. |
| 260 | ····················································································Enabling·reverse | ||
| 261 | ····················································································path·filtering | ||
| 262 | ····················································································drops·packets·with | ||
| 263 | ····················································································source·addresses | ||
| 264 | ····················································································that·should·not | ||
| 235 | ·····························To·set·the·runtime·status·of·the | 265 | ·····························To·set·the·runtime·status·of·the·······················have·been·able·to |
| 266 | ·········Enable·Kernel·······net.ipv4.conf.all.rp_filter·kernel·parameter,·run·the··be·received·on·the | ||
| 267 | ·········Parameter·to·Use····following·command:·····································interface·they·were | ||
| 268 | Req-·····Reverse·Path········$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1·········received·on.·It | ||
| 269 | 1.4.3····Filtering·on·all····To·make·sure·that·the·setting·is·persistent,·add·the···should·not·be·used | ||
| 236 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 237 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 238 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 239 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 240 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 241 | ·········Interfaces | 270 | ·········IPv4·Interfaces·····following·line·to·a·file·in·the·directory·/etc/········on·systems·which |
| 242 | ·····························sysctl.d: | ||
| 243 | ····························· | 271 | ·····························sysctl.d:··············································are·routers·for |
| 272 | ·····························net.ipv4.conf.all.rp_filter·=·1························complicated | ||
| 273 | ····················································································networks,·but·is | ||
| 274 | ····················································································helpful·for·end | ||
| 275 | ····················································································hosts·and·routers | ||
| 276 | ····················································································serving·small | ||
| 277 | ····················································································networks. | ||
| 244 | ····················································································ICMP·redirect | 278 | ····················································································ICMP·redirect |
| 245 | ····················································································messages·are·used | 279 | ····················································································messages·are·used |
| 246 | ····················································································by·routers·to | 280 | ····················································································by·routers·to |
| 247 | ····················································································inform·hosts·that·a | 281 | ····················································································inform·hosts·that·a |
| 248 | ····················································································more·direct·route | 282 | ····················································································more·direct·route |
| 249 | ····················································································exists·for·a | 283 | ····················································································exists·for·a |
| 250 | ····················································································particular | 284 | ····················································································particular |
| Offset 261, 48 lines modified | Offset 295, 14 lines modified | ||
| 261 | ····················································································This·feature·of·the | 295 | ····················································································This·feature·of·the |
| 262 | ····················································································IPv4·protocol·has | 296 | ····················································································IPv4·protocol·has |
| 263 | ····················································································few·legitimate | 297 | ····················································································few·legitimate |
| 264 | ····················································································uses.·It·should·be | 298 | ····················································································uses.·It·should·be |
| Max diff block lines reached; 496361/508982 bytes (97.52%) of diff not shown. | |||
| Offset 69, 15049 lines modified | Offset 69, 15049 lines modified | ||
| 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | 00000440:·6174·696f·6e61·6c65·3c2f·7468·3e0a·2020··ationale</th>.·· | ||
| 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | 00000450:·3c2f·7468·6561·643e·0a20·203c·7462·6f64··</thead>.··<tbod | ||
| 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | 00000460:·793e·0a20·203c·7472·3e0a·2020·2020·2020··y>.··<tr>.······ | ||
| 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | 00000470:·3c74·643e·4155·2d32·2864·293c·6272·2f3e··<td>AU-2(d)<br/> | ||
| 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | 00000480:·4155·2d31·3228·6329·3c62·722f·3e41·432d··AU-12(c)<br/>AC- | ||
| 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | 00000490:·3628·3929·3c62·722f·3e43·4d2d·3628·6129··6(9)<br/>CM-6(a) | Diff chunk too large, falling back to line-by-line diff (10079 lines added, 10079 lines removed) | |
| 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | 000004a0:·3c2f·7464·3e0a·2020·2020·2020·3c74·643e··</td>.······<td> | ||
| 000004b0:· | 000004b0:·5265·636f·7264·2041·6e79·2041·7474·656d··Record·Any·Attem | ||
| 000004c0:· | 000004c0:·7074·7320·746f·2052·756e·2063·6863·6f6e··pts·to·Run·chcon | ||
| 000004d0:· | 000004d0:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | ||
| 000004e0:· | 000004e0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | ||
| 000004f0:· | 000004f0:·3e0a·2020·2020·2020·2020·4174·2061·206d··>.········At·a·m | ||
| 00000500:· | 00000500:·696e·696d·756d·2c20·7468·6520·6175·6469··inimum,·the·audi | ||
| 00000510:·7 | 00000510:·7420·7379·7374·656d·2073·686f·756c·6420··t·system·should· | ||
| 00000520:· | 00000520:·636f·6c6c·6563·7420·616e·7920·6578·6563··collect·any·exec | ||
| 00000530:· | 00000530:·7574·696f·6e20·6174·7465·6d70·740a·6f66··ution·attempt.of | ||
| 00000540:· | 00000540:·2074·6865·203c·7474·3e63·6863·6f6e·3c2f···the·<tt>chcon</ | ||
| 00000550:· | 00000550:·7474·3e20·636f·6d6d·616e·6420·666f·7220··tt>·command·for· | ||
| 00000560:· | 00000560:·616c·6c20·7573·6572·7320·616e·6420·726f··all·users·and·ro | ||
| 00000570:·6 | 00000570:·6f74·2e20·4966·2074·6865·203c·7474·3e61··ot.·If·the·<tt>a | ||
| 00000580:· | 00000580:·7564·6974·643c·2f74·743e·0a64·6165·6d6f··uditd</tt>.daemo | ||
| 00000590:·6 | 00000590:·6e20·6973·2063·6f6e·6669·6775·7265·6420··n·is·configured· | ||
| 000005a0:·6 | 000005a0:·746f·2075·7365·2074·6865·203c·7474·3e61··to·use·the·<tt>a | ||
| 000005b0:· | 000005b0:·7567·656e·7275·6c65·733c·2f74·743e·2070··ugenrules</tt>·p | ||
| 000005c0:·2 | 000005c0:·726f·6772·616d·2074·6f20·7265·6164·2061··rogram·to·read·a | ||
| 000005d0:· | 000005d0:·7564·6974·2072·756c·6573·0a64·7572·696e··udit·rules.durin | ||
| 000005e0:· | 000005e0:·6720·6461·656d·6f6e·2073·7461·7274·7570··g·daemon·startup | ||
| 000005f0:· | 000005f0:·2028·7468·6520·6465·6661·756c·7429·2c20···(the·default),· | ||
| 00000600:·6 | 00000600:·6164·6420·7468·6520·666f·6c6c·6f77·696e··add·the·followin | ||
| 00000610:· | 00000610:·6720·6c69·6e65·7320·746f·2061·2066·696c··g·lines·to·a·fil | ||
| 00000620:· | 00000620:·6520·7769·7468·2073·7566·6669·780a·3c74··e·with·suffix.<t | ||
| 00000630:· | 00000630:·743e·2e72·756c·6573·3c2f·7474·3e20·696e··t>.rules</tt>·in | ||
| 00000640:· | 00000640:·2074·6865·2064·6972·6563·746f·7279·203c···the·directory·< | ||
| 00000650:· | 00000650:·7474·3e2f·6574·632f·6175·6469·742f·7275··tt>/etc/audit/ru | ||
| 00000660:·6573·3c2f | 00000660:·6c65·732e·643c·2f74·743e·3a0a·3c70·7265··les.d</tt>:.<pre | ||
| 00000670:·6 | 00000670:·3e2d·6120·616c·7761·7973·2c65·7869·7420··>-a·always,exit· | ||
| 00000680:·6 | 00000680:·2d46·2070·6174·683d·2f75·7372·2f62·696e··-F·path=/usr/bin | ||
| 00000690:·2f | 00000690:·2f63·6863·6f6e·202d·4620·6175·6964·2667··/chcon·-F·auid&g | ||
| 000006a0:·7 | 000006a0:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 000006b0:· | 000006b0:·3d75·6e73·6574·202d·4620·6b65·793d·7072··=unset·-F·key=pr | ||
| 000006c0:· | 000006c0:·6976·696c·6567·6564·3c2f·7072·653e·0a49··ivileged</pre>.I | ||
| 000006d0:· | 000006d0:·6620·7468·6520·3c74·743e·6175·6469·7464··f·the·<tt>auditd | ||
| 000006e0:· | 000006e0:·3c2f·7474·3e20·6461·656d·6f6e·2069·7320··</tt>·daemon·is· | ||
| 000006f0:· | 000006f0:·636f·6e66·6967·7572·6564·2074·6f20·7573··configured·to·us | ||
| 00000700:·2074 | 00000700:·6520·7468·6520·3c74·743e·6175·6469·7463··e·the·<tt>auditc | ||
| 00000710:· | 00000710:·746c·3c2f·7474·3e0a·7574·696c·6974·7920··tl</tt>.utility· | ||
| 00000720:·6f | 00000720:·746f·2072·6561·6420·6175·6469·7420·7275··to·read·audit·ru | ||
| 00000730:· | 00000730:·6c65·7320·6475·7269·6e67·2064·6165·6d6f··les·during·daemo | ||
| 00000740:·6 | 00000740:·6e20·7374·6172·7475·702c·2061·6464·2074··n·startup,·add·t | ||
| 00000750:·6 | 00000750:·6865·2066·6f6c·6c6f·7769·6e67·206c·696e··he·following·lin | ||
| 00000760:·6573·20 | 00000760:·6573·2074·6f0a·3c74·743e·2f65·7463·2f61··es·to.<tt>/etc/a | ||
| 00000770:· | 00000770:·7564·6974·2f61·7564·6974·2e72·756c·6573··udit/audit.rules | ||
| 00000780:· | 00000780:·3c2f·7474·3e20·6669·6c65·3a0a·3c70·7265··</tt>·file:.<pre | ||
| 00000790:· | 00000790:·3e2d·6120·616c·7761·7973·2c65·7869·7420··>-a·always,exit· | ||
| 000007a0:· | 000007a0:·2d46·2070·6174·683d·2f75·7372·2f62·696e··-F·path=/usr/bin | ||
| 000007b0:· | 000007b0:·2f63·6863·6f6e·202d·4620·6175·6964·2667··/chcon·-F·auid&g | ||
| 000007c0:·7 | 000007c0:·743b·3d31·3030·3020·2d46·2061·7569·6421··t;=1000·-F·auid! | ||
| 000007d0:·6 | 000007d0:·3d75·6e73·6574·202d·4620·6b65·793d·7072··=unset·-F·key=pr | ||
| 000007e0:· | 000007e0:·6976·696c·6567·6564·3c2f·7072·653e·0a20··ivileged</pre>.· | ||
| 000007f0:· | 000007f0:·2020·2020·203c·2f74·643e·0a20·2020·2020·······</td>.····· | ||
| 00000800:·2 | 00000800:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | ||
| 00000810:· | 00000810:·6e2d·5553·223e·0a20·2020·2020·2020·204d··n-US">.········M | ||
| 00000820:· | 00000820:·6973·7573·6520·6f66·2070·7269·7669·6c65··isuse·of·privile | ||
| 00000830:·6 | 00000830:·6765·6420·6675·6e63·7469·6f6e·732c·2065··ged·functions,·e | ||
| 00000840:· | 00000840:·6974·6865·7220·696e·7465·6e74·696f·6e61··ither·intentiona | ||
| 00000850:· | 00000850:·6c6c·7920·6f72·2075·6e69·6e74·656e·7469··lly·or·unintenti | ||
| 00000860:· | 00000860:·6f6e·616c·6c79·2062·790a·6175·7468·6f72··onally·by.author | ||
| 00000870:· | 00000870:·697a·6564·2075·7365·7273·2c20·6f72·2062··ized·users,·or·b | ||
| 00000880:·7 | 00000880:·7920·756e·6175·7468·6f72·697a·6564·2065··y·unauthorized·e | ||
| 00000890:· | 00000890:·7874·6572·6e61·6c20·656e·7469·7469·6573··xternal·entities | ||
| 000008a0:· | 000008a0:·2074·6861·7420·6861·7665·2063·6f6d·7072···that·have·compr | ||
| 000008b0:· | 000008b0:·6f6d·6973·6564·2073·7973·7465·6d20·6163··omised·system·ac | ||
| 000008c0:·6f7 | 000008c0:·636f·756e·7473·2c0a·6973·2061·2073·6572··counts,.is·a·ser | ||
| 000008d0:·6 | 000008d0:·696f·7573·2061·6e64·206f·6e67·6f69·6e67··ious·and·ongoing | ||
| 000008e0:· | 000008e0:·2063·6f6e·6365·726e·2061·6e64·2063·616e···concern·and·can | ||
| 000008f0:· | 000008f0:·2068·6176·6520·7369·676e·6966·6963·616e···have·significan | ||
| 00000900:· | 00000900:·7420·6164·7665·7273·6520·696d·7061·6374··t·adverse·impact | ||
| 00000910:· | 00000910:·7320·6f6e·206f·7267·616e·697a·6174·696f··s·on·organizatio | ||
| 00000920:· | 00000920:·6e73·2e0a·4175·6469·7469·6e67·2074·6865··ns..Auditing·the | ||
| 00000930:· | 00000930:·2075·7365·206f·6620·7072·6976·696c·6567···use·of·privileg | ||
| 00000940:·65 | 00000940:·6564·2066·756e·6374·696f·6e73·2069·7320··ed·functions·is· | ||
| 00000950:·6 | 00000950:·6f6e·6520·7761·7920·746f·2064·6574·6563··one·way·to·detec | ||
| 00000960:·74 | 00000960:·7420·7375·6368·206d·6973·7573·6520·616e··t·such·misuse·an | ||
| 00000970:· | 00000970:·6420·6964·656e·7469·6679·0a74·6865·2072··d·identify.the·r | ||
| 00000980:·69 | 00000980:·6973·6b20·6672·6f6d·2069·6e73·6964·6572··isk·from·insider | ||
| 00000990:· | 00000990:·2061·6e64·2061·6476·616e·6365·6420·7065···and·advanced·pe | ||
| 000009a0:· | 000009a0:·7273·6973·7465·6e74·2074·6872·6561·7473··rsistent·threats | ||
| 000009b0:· | 000009b0:·2e0a·3c62·7220·2f3e·3c62·7220·2f3e·0a50··..<br·/><br·/>.P | ||
| 000009c0:· | 000009c0:·7269·7669·6c65·6765·6420·7072·6f67·7261··rivileged·progra | ||
| 000009d0:·6 | 000009d0:·6d73·2061·7265·2073·7562·6a65·6374·2074··ms·are·subject·t | ||
| 000009e0:· | 000009e0:·6f20·6573·6361·6c61·7469·6f6e·2d6f·662d··o·escalation-of- | ||
| 000009f0:· | 000009f0:·7072·6976·696c·6567·6520·6174·7461·636b··privilege·attack | ||
| 00000a00:· | 00000a00:·732c·0a77·6869·6368·2061·7474·656d·7074··s,.which·attempt | ||
| 00000a10:·7 | 00000a10:·2074·6f20·7375·6276·6572·7420·7468·6569···to·subvert·thei | ||
| 00000a20:·7 | 00000a20:·7220·6e6f·726d·616c·2072·6f6c·6520·6f66··r·normal·role·of | ||
| 00000a30:· | 00000a30:·2070·726f·7669·6469·6e67·2073·6f6d·6520···providing·some· | ||
| 00000a40:· | 00000a40:·6e65·6365·7373·6172·7920·6275·740a·6c69··necessary·but.li | ||
| 00000a50:·6 | 00000a50:·6d69·7465·6420·6361·7061·6269·6c69·7479··mited·capability | ||
| 00000a60:·207 | 00000a60:·2e20·4173·2073·7563·682c·206d·6f74·6976··.·As·such,·motiv | ||
| 00000a70:·6 | 00000a70:·6174·696f·6e20·6578·6973·7473·2074·6f20··ation·exists·to· | ||
| 00000a80:· | 00000a80:·6d6f·6e69·746f·7220·7468·6573·6520·7072··monitor·these·pr | ||
| 00000a90:· | 00000a90:·6f67·7261·6d73·2066·6f72·0a75·6e75·7375··ograms·for.unusu | ||
| 00000aa0:·6 | 00000aa0:·616c·2061·6374·6976·6974·792e·0a20·2020··al·activity..··· | ||
| 00000ab0:· | 00000ab0:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | ||
| 00000ac0:·7 | 00000ac0:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | ||
| 00000ad0:· | 00000ad0:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000ae0:· | 00000ae0:·2f3e·4155·2d31·3228·6329·3c62·722f·3e43··/>AU-12(c)<br/>C | ||
| 00000af0:· | 00000af0:·4d2d·3628·6129·3c2f·7464·3e0a·2020·2020··M-6(a)</td>.···· | ||
| 00000b00:· | 00000b00:·2020·3c74·643e·5265·636f·7264·2055·6e73····<td>Record·Uns | ||
| 00000b10:· | 00000b10:·7563·6365·7373·6675·6c20·4465·6c65·7465··uccessful·Delete | ||
| 00000b20:· | 00000b20:·2041·7474·656d·7074·7320·746f·2046·696c···Attempts·to·Fil | ||
| 00000b30:· | 00000b30:·6573·202d·2075·6e6c·696e·6b3c·2f74·643e··es·-·unlink</td> | ||
| 00000b40:· | 00000b40:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000b50:· | 00000b50:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000b60:· | 00000b60:·2020·2020·200a·5468·6520·6175·6469·7420·······.The·audit· | ||
| 00000b70:·7 | 00000b70:·7379·7374·656d·2073·686f·756c·6420·636f··system·should·co | ||
| 00000b80:·6c | 00000b80:·6c6c·6563·7420·756e·7375·6363·6573·7366··llect·unsuccessf | ||
| 00000b90:· | 00000b90:·756c·2066·696c·6520·6465·6c65·7469·6f6e··ul·file·deletion | ||
| 00000ba0:· | 00000ba0:·0a61·7474·656d·7074·7320·666f·7220·616c··.attempts·for·al | ||
| 00000bb0:· | 00000bb0:·6c20·7573·6572·7320·616e·6420·726f·6f74··l·users·and·root | ||
| 00000bc0:· | 00000bc0:·2e20·4966·2074·6865·203c·7474·3e61·7564··.·If·the·<tt>aud | ||
| 00000bd0:· | 00000bd0:·6974·643c·2f74·743e·2064·6165·6d6f·6e20··itd</tt>·daemon· | ||
| 00000be0:·6 | 00000be0:·6973·2063·6f6e·6669·6775·7265·640a·746f··is·configured.to | ||
| 00000bf0:· | 00000bf0:·2075·7365·2074·6865·203c·7474·3e61·7567···use·the·<tt>aug | ||
| 00000c00:·6 | 00000c00:·656e·7275·6c65·733c·2f74·743e·2070·726f··enrules</tt>·pro | ||
| 00000c10:·7 | 00000c10:·6772·616d·2074·6f20·7265·6164·2061·7564··gram·to·read·aud | ||
| Max diff block lines reached; 6314969/7706449 bytes (81.94%) of diff not shown. | |||
| Offset 64, 274 lines modified | Offset 64, 274 lines modified | ||
| 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | 000003f0:·3c74·683e·5275·6c65·2054·6974·6c65·3c2f··<th>Rule·Title</ | ||
| 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | 00000400:·7468·3e0a·2020·2020·3c74·683e·4465·7363··th>.····<th>Desc | ||
| 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | 00000410:·7269·7074·696f·6e3c·2f74·683e·0a20·2020··ription</th>.··· | ||
| 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | 00000420:·203c·7468·3e52·6174·696f·6e61·6c65·3c2f···<th>Rationale</ | ||
| 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | 00000430:·7468·3e0a·2020·3c2f·7468·6561·643e·0a20··th>.··</thead>.· | ||
| 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | 00000440:·203c·7462·6f64·793e·0a20·203c·7472·3e0a···<tbody>.··<tr>. | ||
| 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | 00000450:·2020·2020·2020·3c74·643e·5231·3c2f·7464········<td>R1</td | ||
| 00000460:·3e0a·2020·2020·2020·3c74·643e·5072·6566··>.······<td>Pref | |||
| 00000470:·6572·2074·6f20·7573·6520·6120·3634·2d62··er·to·use·a·64-b | |||
| 00000480:·6974·204f·7065·7261·7469·6e67·2053·7973··it·Operating·Sys | |||
| 00000490:·7465·6d20·7768·656e·2073·7570·706f·7274··tem·when·support | |||
| 000004a0:·6564·3c2f·7464·3e0a·2020·2020·2020·3c74··ed</td>.······<t | |||
| 000004b0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | |||
| 000004c0:·5322·3e0a·2020·2020·2020·2020·5072·6566··S">.········Pref | |||
| 000004d0:·6572·2069·6e73·7461·6c6c·6174·696f·6e20··er·installation· | |||
| 000004e0:·6f66·2036·342d·6269·7420·6f70·6572·6174··of·64-bit·operat | |||
| 000004f0:·696e·6720·7379·7374·656d·7320·7768·656e··ing·systems·when | |||
| 00000500:·2074·6865·2043·5055·2073·7570·706f·7274···the·CPU·support | |||
| 00000510:·7320·6974·2e0a·2020·2020·2020·3c2f·7464··s·it..······</td | |||
| 00000520:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00000530:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00000540:·2020·2020·2020·5573·6520·6f66·2061·2036········Use·of·a·6 | |||
| 00000550:·342d·6269·7420·6f70·6572·6174·696e·6720··4-bit·operating· | |||
| 00000560:·7379·7374·656d·206f·6666·6572·7320·6120··system·offers·a· | |||
| 00000570:·6665·7720·6164·7661·6e74·6167·6573·2c20··few·advantages,· | |||
| 00000580:·6c69·6b65·2061·206c·6172·6765·7220·6164··like·a·larger·ad | |||
| 00000590:·6472·6573·7320·7370·6163·6520·7261·6e67··dress·space·rang | |||
| 000005a0:·6520·666f·720a·4164·6472·6573·7320·5370··e·for.Address·Sp | |||
| 000005b0:·6163·6520·4c61·796f·7574·2052·616e·646f··ace·Layout·Rando | |||
| 000005c0:·6d69·7a61·7469·6f6e·2028·4153·4c52·2920··mization·(ASLR)· | |||
| 000005d0:·616e·6420·7379·7374·656d·6174·6963·2070··and·systematic·p | |||
| 000005e0:·7265·7365·6e63·6520·6f66·204e·6f20·6558··resence·of·No·eX | |||
| 000005f0:·6563·7574·6520·616e·6420·4578·6563·7574··ecute·and·Execut | |||
| 00000600:·6520·4469·7361·626c·6520·284e·582f·5844··e·Disable·(NX/XD | |||
| 00000610:·2920·7072·6f74·6563·7469·6f6e·2062·6974··)·protection·bit | |||
| 00000620:·732e·0a20·2020·2020·203c·2f74·643e·0a20··s..······</td>.· | |||
| 00000630:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | |||
| 00000640:·3e0a·2020·2020·2020·3c74·643e·5231·3c2f··>.······<td>R1</ | |||
| 00000 | 00000460:·3e0a·2020·2020·2020·3c74·643e·456e·7375··>.······<td>Ensu | ||
| 00000470:·7265·2053·4d45·5020·6973·206e·6f74·2064··re·SMEP·is·not·d | |||
| 00000480:·6973·6162·6c65·6420·6475·7269·6e67·2062··isabled·during·b | |||
| 00000660:·7374·616c·6c20·5041·4520·4b65·726e·656c··stall·PAE·Kernel | |||
| 00000670:·206f·6e20·5375·7070·6f72·7465·6420·3332···on·Supported·32 | |||
| 00000680:·2d62·6974·2078·3836·2053·7973·7465·6d73··-bit·x86·Systems | |||
| 00000690:·3c2f·7464·3e0a·2020·2020·2020·3c74·6420··</td>.······<td· | |||
| 000006a0:·786d·6c3a·6c61·6e67·3d22·656e·2d55·5322··xml:lang="en-US" | |||
| 000006b0:·3e0a·2020·2020·2020·2020·5379·7374·656d··>.········System | |||
| 000006c0:·7320·7468·6174·2061·7265·2075·7369·6e67··s·that·are·using | |||
| 000006d0:·2074·6865·2036·342d·6269·7420·7838·3620···the·64-bit·x86· | |||
| 000006e0:·6b65·726e·656c·2070·6163·6b61·6765·0a64··kernel·package.d | |||
| 000006f0:·6f20·6e6f·7420·6e65·6564·2074·6f20·696e··o·not·need·to·in | |||
| 00000700:·7374·616c·6c20·7468·6520·6b65·726e·656c··stall·the·kernel | |||
| 00000710:·2d50·4145·2070·6163·6b61·6765·2062·6563··-PAE·package·bec | |||
| 00000720:·6175·7365·2074·6865·2036·342d·6269·740a··ause·the·64-bit. | |||
| 00000730:·7838·3620·6b65·726e·656c·2061·6c72·6561··x86·kernel·alrea | |||
| 00000740:·6479·2069·6e63·6c75·6465·7320·7468·6973··dy·includes·this | |||
| 00000750:·2073·7570·706f·7274·2e20·486f·7765·7665···support.·Howeve | |||
| 00000760:·722c·2069·6620·7468·6520·7379·7374·656d··r,·if·the·system | |||
| 00000770:·2069·730a·3332·2d62·6974·2061·6e64·2061···is.32-bit·and·a | |||
| 00000780:·6c73·6f20·7375·7070·6f72·7473·2074·6865··lso·supports·the | |||
| 00000790:·2050·4145·2061·6e64·204e·5820·6665·6174···PAE·and·NX·feat | |||
| 000007a0:·7572·6573·2061·730a·6465·7465·726d·696e··ures·as.determin | |||
| 000007b0:·6564·2069·6e20·7468·6520·7072·6576·696f··ed·in·the·previo | |||
| 000007c0:·7573·2073·6563·7469·6f6e·2c20·7468·6520··us·section,·the· | |||
| 000007d0:·6b65·726e·656c·2d50·4145·2070·6163·6b61··kernel-PAE·packa | |||
| 000007e0:·6765·2073·686f·756c·640a·6265·2069·6e73··ge·should.be·ins | |||
| 000007f0:·7461·6c6c·6564·2074·6f20·656e·6162·6c65··talled·to·enable | |||
| 00000800:·2058·4420·6f72·204e·5820·7375·7070·6f72···XD·or·NX·suppor | |||
| 00000810:·742e·0a54·6865·203c·636f·6465·3e6b·6572··t..The·<code>ker | |||
| 00000820:·6e65·6c2d·5041·453c·2f63·6f64·653e·2070··nel-PAE</code>·p | |||
| 00000830:·6163·6b61·6765·2063·616e·2062·6520·696e··ackage·can·be·in | |||
| 00000840:·7374·616c·6c65·6420·7769·7468·2074·6865··stalled·with·the | |||
| 00000850:·2066·6f6c·6c6f·7769·6e67·2063·6f6d·6d61···following·comma | |||
| 00000860:·6e64·3a0a·3c70·7265·3e0a·2420·7375·646f··nd:.<pre>.$·sudo | |||
| 00000870:·2079·756d·2069·6e73·7461·6c6c·206b·6572···yum·install·ker | |||
| 00000880:·6e65·6c2d·5041·453c·2f70·7265·3e0a·5468··nel-PAE</pre>.Th | |||
| 00000890:·6520·696e·7374·616c·6c61·7469·6f6e·2070··e·installation·p | |||
| 000008a0:·726f·6365·7373·2073·686f·756c·6420·616c··rocess·should·al | |||
| 000008b0:·736f·2068·6176·6520·636f·6e66·6967·7572··so·have·configur | |||
| 000008c0:·6564·2074·6865·0a62·6f6f·746c·6f61·6465··ed·the.bootloade | |||
| 000008d0:·7220·746f·206c·6f61·6420·7468·6520·6e65··r·to·load·the·ne | |||
| 000008e0:·7720·6b65·726e·656c·2061·7420·626f·6f74··w·kernel·at·boot | |||
| 000008f0:·2e20·5665·7269·6679·2074·6869·7320·6166··.·Verify·this·af | |||
| 00000900:·7465·7220·7265·626f·6f74·0a61·6e64·206d··ter·reboot.and·m | |||
| 00000910:·6f64·6966·7920·3c74·743e·2f65·7463·2f64··odify·<tt>/etc/d | |||
| 00000920:·6566·6175·6c74·2f67·7275·623c·2f74·743e··efault/grub</tt> | |||
| 00000930:·2069·6620·6e65·6365·7373·6172·792e·0a20···if·necessary..· | |||
| 00000 | 00000490:·6f6f·743c·2f74·643e·0a20·2020·2020·203c··oot</td>.······< | ||
| 00000 | 000004a0:·7464·2078·6d6c·3a6c·616e·673d·2265·6e2d··td·xml:lang="en- | ||
| 00000 | 000004b0:·5553·223e·0a20·2020·2020·2020·2054·6865··US">.········The | ||
| 00000970:·6e20·3332·2d62·6974·2073·7973·7465·6d73··n·32-bit·systems | |||
| 00000980:·2074·6861·7420·7375·7070·6f72·7420·7468···that·support·th | |||
| 00000990:·6520·5844·206f·7220·4e58·2062·6974·2c20··e·XD·or·NX·bit,· | |||
| 000009a0:·7468·6520·7665·6e64·6f72·2d73·7570·706c··the·vendor-suppl | |||
| 000009b0:·6965·640a·5041·4520·6b65·726e·656c·2069··ied.PAE·kernel·i | |||
| 000009c0:·7320·7265·7175·6972·6564·2074·6f20·656e··s·required·to·en | |||
| 000009d0:·6162·6c65·2065·6974·6865·7220·4578·6563··able·either·Exec | |||
| 000009e0:·7574·6520·4469·7361·626c·6520·2858·4429··ute·Disable·(XD) | |||
| 000009f0:·206f·7220·4e6f·2045·7865·6375·7465·2028···or·No·Execute·( | |||
| 00000a00:·4e58·2920·7375·7070·6f72·742e·0a20·2020··NX)·support..··· | |||
| 00000a10:·2020·203c·2f74·643e·0a20·2020·203c·2f74·····</td>.····</t | |||
| 00000a20:·723e·0a20·2020·203c·7472·3e0a·2020·2020··r>.····<tr>.···· | |||
| 00000a30:·2020·3c74·643e·5231·3c2f·7464·3e0a·2020····<td>R1</td>.·· | |||
| 00000a40:·2020·2020·3c74·643e·496e·7374·616c·6c20······<td>Install· | |||
| 00000a50:·7468·6520·6472·6163·7574·2d66·6970·732d··the·dracut-fips- | |||
| 00000 | 000004c0:·2053·4d45·5020·6973·2075·7365·6420·746f···SMEP·is·used·to | ||
| 000004d0:·2070·7265·7665·6e74·2074·6865·2073·7570···prevent·the·sup | |||
| 000004e0:·6572·7669·736f·7220·6d6f·6465·2066·726f··ervisor·mode·fro | |||
| 000004f0:·6d20·6578·6563·7574·696e·6720·7573·6572··m·executing·user | |||
| 00000500:·2073·7061·6365·2063·6f64·652c·0a69·7420···space·code,.it· | |||
| 00000510:·6973·2065·6e61·626c·6564·2062·7920·6465··is·enabled·by·de | |||
| 00000520:·6661·756c·7420·7369·6e63·6520·4c69·6e75··fault·since·Linu | |||
| 00000530:·7820·6b65·726e·656c·2033·2e30·2e20·4275··x·kernel·3.0.·Bu | |||
| 00000540:·7420·6974·2063·6f75·6c64·2062·6520·6469··t·it·could·be·di | |||
| 00000550:·7361·626c·6564·2074·6872·6f75·6768·0a6b··sabled·through.k | |||
| 00000560:·6572·6e65·6c20·626f·6f74·2070·6172·616d··ernel·boot·param | |||
| 00000570:·6574·6572·732e·0a0a·456e·7375·7265·2074··eters...Ensure·t | |||
| 00000580:·6861·7420·5375·7065·7276·6973·6f72·204d··hat·Supervisor·M | |||
| 00000590:·6f64·6520·4578·6563·7574·696f·6e20·5072··ode·Execution·Pr | |||
| 000005a0:·6576·656e·7469·6f6e·2028·534d·4550·2920··evention·(SMEP)· | |||
| 000005b0:·6973·206e·6f74·2064·6973·6162·6c65·6420··is·not·disabled· | |||
| 000005c0:·6279·0a74·6865·203c·7474·3e6e·6f73·6d65··by.the·<tt>nosme | |||
| 000005d0:·703c·2f74·743e·2062·6f6f·7420·7061·7261··p</tt>·boot·para | |||
| 000005e0:·6d65·6e74·6572·206f·7074·696f·6e2e·0a0a··menter·option... | |||
| 000005f0:·4368·6563·6b20·7468·6174·2074·6865·206c··Check·that·the·l | |||
| 00000600:·696e·6520·3c70·7265·3e47·5255·425f·434d··ine·<pre>GRUB_CM | |||
| 00000610:·444c·494e·455f·4c49·4e55·583d·222e·2e2e··DLINE_LINUX="... | |||
| Max diff block lines reached; 2958247/2994701 bytes (98.78%) of diff not shown. | |||
| Offset 1623, 138 lines modified | Offset 1623, 138 lines modified | ||
| 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | 00006560:·6520·7468·6520·7379·7374·656d·2074·6f20··e·the·system·to· | ||
| 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | 00006570:·706f·7465·6e74·6961·6c20·636f·6d70·726f··potential·compro | ||
| 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | 00006580:·6d69·7365·2e0a·2020·2020·2020·3c2f·7464··mise..······</td | ||
| 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | 00006590:·3e0a·2020·2020·3c2f·7472·3e0a·2020·2020··>.····</tr>.···· | ||
| 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | 000065a0:·3c74·723e·0a20·2020·2020·203c·7464·3e31··<tr>.······<td>1 | ||
| 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | 000065b0:·2e32·2e32·3c2f·7464·3e0a·2020·2020·2020··.2.2</td>.······ | ||
| 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | 000065c0:·3c74·643e·456e·7375·7265·2067·7067·6368··<td>Ensure·gpgch | ||
| 000065d0:·6563·6b20·456e·6162·6c65·6420· | 000065d0:·6563·6b20·456e·6162·6c65·6420·496e·204d··eck·Enabled·In·M | ||
| 000065e0:·6169·6e20·7975·6d20·436f·6e66·6967·7572··ain·yum·Configur | |||
| 000065f0:·6174·696f·6e3c·2f74·643e·0a20·2020·2020··ation</td>.····· | |||
| 00006600:·203c·7464·2078·6d6c·3a6c·616e·673d·2265···<td·xml:lang="e | |||
| 000065e0:·416c·6c20·7975·6d20·5061·636b·6167·6520··All·yum·Package· | |||
| 000065f0:·5265·706f·7369·746f·7269·6573·3c2f·7464··Repositories</td | |||
| 00006600:·3e0a·2020·2020·2020·3c74·6420·786d·6c3a··>.······<td·xml: | |||
| 00006610:·6c61·6e67·3d22·656e·2d55·5322·3e0a·2020··lang="en-US">.·· | |||
| 00006620:·2020·2020·2020·546f·2065·6e73·7572·6520········To·ensure· | |||
| 00006630:·7369·676e·6174·7572·6520·6368·6563·6b69··signature·checki | |||
| 00006640:·6e67·2069·7320·6e6f·7420·6469·7361·626c··ng·is·not·disabl | |||
| 00006650:·6564·2066·6f72·0a61·6e79·2072·6570·6f73··ed·for.any·repos | |||
| 00006660:·2c20·7265·6d6f·7665·2061·6e79·206c·696e··,·remove·any·lin | |||
| 00006670:·6573·2066·726f·6d20·6669·6c65·7320·696e··es·from·files·in | |||
| 00006680:·203c·7474·3e2f·6574·632f·7975·6d2e·7265···<tt>/etc/yum.re | |||
| 00006690:·706f·732e·643c·2f74·743e·206f·6620·7468··pos.d</tt>·of·th | |||
| 000066a0:·6520·666f·726d·3a0a·3c70·7265·3e67·7067··e·form:.<pre>gpg | |||
| 000066b0:·6368·6563·6b3d·303c·2f70·7265·3e0a·2020··check=0</pre>.·· | |||
| 000066c0:·2020·2020·3c2f·7464·3e0a·2020·2020·2020······</td>.······ | |||
| 000066d0:·3c74·6420·786d·6c3a·6c61·6e67·3d22·656e··<td·xml:lang="en | |||
| 000066 | 00006610:·6e2d·5553·223e·0a20·2020·2020·2020·2054··n-US">.········T | ||
| 000066f0:·7269·6679·696e·6720·7468·6520·6175·7468··rifying·the·auth | |||
| 00006700:·656e·7469·6369·7479·206f·6620·7468·6520··enticity·of·the· | |||
| 00006 | 00006620:·6865·203c·7474·3e67·7067·6368·6563·6b3c··he·<tt>gpgcheck< | ||
| 00006630:·2f74·743e·206f·7074·696f·6e20·636f·6e74··/tt>·option·cont | |||
| 00006640:·726f·6c73·2077·6865·7468·6572·0a52·504d··rols·whether.RPM | |||
| 00006650:·2070·6163·6b61·6765·7327·2073·6967·6e61···packages'·signa | |||
| 00006660:·7475·7265·7320·6172·6520·616c·7761·7973··tures·are·always | |||
| 00006670:·2063·6865·636b·6564·2070·7269·6f72·2074···checked·prior·t | |||
| 00006 | 00006680:·6f20·696e·7374·616c·6c61·7469·6f6e·2e0a··o·installation.. | ||
| 00006690:·546f·2063·6f6e·6669·6775·7265·2079·756d··To·configure·yum | |||
| 000066a0:·2074·6f20·6368·6563·6b20·7061·636b·6167···to·check·packag | |||
| 000066b0:·6520·7369·676e·6174·7572·6573·2062·6566··e·signatures·bef | |||
| 000066c0:·6f72·6520·696e·7374·616c·6c69·6e67·0a74··ore·installing.t | |||
| 000066d0:·6865·6d2c·2065·6e73·7572·6520·7468·6520··hem,·ensure·the· | |||
| 000066e0:·666f·6c6c·6f77·696e·6720·6c69·6e65·2061··following·line·a | |||
| 000066f0:·7070·6561·7273·2069·6e20·3c74·743e·2f65··ppears·in·<tt>/e | |||
| 00006700:·7463·2f79·756d·2e63·6f6e·663c·2f74·743e··tc/yum.conf</tt> | |||
| 00006710:·2069·6e0a·7468·6520·3c74·743e·5b6d·6169···in.the·<tt>[mai | |||
| 00006720:·6e5d·3c2f·7474·3e20·7365·6374·696f·6e3a··n]</tt>·section: | |||
| 00006730:·0a3c·7072·653e·6770·6763·6865·636b·3d31··.<pre>gpgcheck=1 | |||
| 00006740:·3c2f·7072·653e·0a20·2020·2020·203c·2f74··</pre>.······</t | |||
| 00006750:·643e·0a20·2020·2020·203c·7464·2078·6d6c··d>.······<td·xml | |||
| 00006760:·3a6c·616e·673d·2265·6e2d·5553·223e·0a20··:lang="en-US">.· | |||
| 00006770:·2020·2020·2020·2043·6861·6e67·6573·2074·········Changes·t | |||
| 00006780:·6f20·616e·7920·736f·6674·7761·7265·2063··o·any·software·c | |||
| 00006790:·6f6d·706f·6e65·6e74·7320·6361·6e20·6861··omponents·can·ha | |||
| 000067a0:·7665·2073·6967·6e69·6669·6361·6e74·2065··ve·significant·e | |||
| 000067b0:·6666·6563·7473·206f·6e20·7468·650a·6f76··ffects·on·the.ov | |||
| 000067c0:·6572·616c·6c20·7365·6375·7269·7479·206f··erall·security·o | |||
| 000067d0:·6620·7468·6520·6f70·6572·6174·696e·6720··f·the·operating· | |||
| 000067e0:·7379·7374·656d·2e20·5468·6973·2072·6571··system.·This·req | |||
| 000067f0:·7569·7265·6d65·6e74·2065·6e73·7572·6573··uirement·ensures | |||
| 00006800:·2074·6865·0a73·6f66·7477·6172·6520·6861···the.software·ha | |||
| 00006810:·7320·6e6f·7420·6265·656e·2074·616d·7065··s·not·been·tampe | |||
| 00006820:·7265·6420·7769·7468·2061·6e64·2074·6861··red·with·and·tha | |||
| 00006830:·7420·6974·2068·6173·2062·6565·6e20·7072··t·it·has·been·pr | |||
| 00006840:·6f76·6964·6564·2062·7920·610a·7472·7573··ovided·by·a.trus | |||
| 00006850:·7465·6420·7665·6e64·6f72·2e0a·3c62·7220··ted·vendor..<br· | |||
| 00006860:·2f3e·0a41·6363·6f72·6469·6e67·6c79·2c20··/>.Accordingly,· | |||
| 00006870:·7061·7463·6865·732c·2073·6572·7669·6365··patches,·service | |||
| 00006880:·2070·6163·6b73·2c20·6465·7669·6365·2064···packs,·device·d | |||
| 00006890:·7269·7665·7273·2c20·6f72·206f·7065·7261··rivers,·or·opera | |||
| 000068a0:·7469·6e67·2073·7973·7465·6d0a·636f·6d70··ting·system.comp | |||
| 000068b0:·6f6e·656e·7473·206d·7573·7420·6265·2073··onents·must·be·s | |||
| 000068c0:·6967·6e65·6420·7769·7468·2061·2063·6572··igned·with·a·cer | |||
| 000068d0:·7469·6669·6361·7465·2072·6563·6f67·6e69··tificate·recogni | |||
| 000068e0:·7a65·6420·616e·6420·6170·7072·6f76·6564··zed·and·approved | |||
| 000068f0:·2062·7920·7468·650a·6f72·6761·6e69·7a61···by·the.organiza | |||
| 00006900:·7469·6f6e·2e0a·3c62·7220·2f3e·5665·7269··tion..<br·/>Veri | |||
| 00006910:·6679·696e·6720·7468·6520·6175·7468·656e··fying·the·authen | |||
| 00006920:·7469·6369·7479·206f·6620·7468·6520·736f··ticity·of·the·so | |||
| 00006930:·6674·7761·7265·2070·7269·6f72·2074·6f20··ftware·prior·to· | |||
| 00006940:·696e·7374·616c·6c61·7469·6f6e·0a76·616c··installation.val | |||
| 00006 | 00006950:·6964·6174·6573·2074·6865·2069·6e74·6567··idates·the·integ | ||
| 00006 | 00006960:·7269·7479·206f·6620·7468·6520·7061·7463··rity·of·the·patc | ||
| 00006 | 00006970:·6820·6f72·2075·7067·7261·6465·2072·6563··h·or·upgrade·rec | ||
| 00006 | 00006980:·6569·7665·6420·6672·6f6d·2061·2076·656e··eived·from·a·ven | ||
| 00006 | 00006990:·646f·722e·0a54·6869·7320·656e·7375·7265··dor..This·ensure | ||
| 00006 | 000069a0:·7320·7468·6520·736f·6674·7761·7265·2068··s·the·software·h | ||
| 00006 | 000069b0:·6173·206e·6f74·2062·6565·6e20·7461·6d70··as·not·been·tamp | ||
| 00006 | 000069c0:·6572·6564·2077·6974·6820·616e·6420·7468··ered·with·and·th | ||
| 00006 | 000069d0:·6174·2069·7420·6861·7320·6265·656e·0a70··at·it·has·been.p | ||
| 00006 | 000069e0:·726f·7669·6465·6420·6279·2061·2074·7275··rovided·by·a·tru | ||
| 00006 | 000069f0:·7374·6564·2076·656e·646f·722e·2053·656c··sted·vendor.·Sel | ||
| 00006 | 00006a00:·662d·7369·676e·6564·2063·6572·7469·6669··f-signed·certifi | ||
| 00006 | 00006a10:·6361·7465·7320·6172·6520·6469·7361·6c6c··cates·are·disall | ||
| 00006 | 00006a20:·6f77·6564·2062·790a·7468·6973·2072·6571··owed·by.this·req | ||
| 00006 | 00006a30:·7569·7265·6d65·6e74·2e20·4365·7274·6966··uirement.·Certif | ||
| 00006 | 00006a40:·6963·6174·6573·2075·7365·6420·746f·2076··icates·used·to·v | ||
| 00006 | 00006a50:·6572·6966·7920·7468·6520·736f·6674·7761··erify·the·softwa | ||
| 00006 | 00006a60:·7265·206d·7573·7420·6265·2066·726f·6d20··re·must·be·from· | ||
| 00006 | 00006a70:·616e·0a61·7070·726f·7665·6420·4365·7274··an.approved·Cert | ||
| 00006 | 00006a80:·6966·6963·6174·6520·4175·7468·6f72·6974··ificate·Authorit | ||
| 00006 | 00006a90:·7920·2843·4129·2e0a·2020·2020·2020·3c2f··y·(CA)..······</ | ||
| 00006aa0:·7464·3e0a·2020·2020·3c2f·7472·3e0a·2020··td>.····</tr>.·· | |||
| 00006880:·203c·2f74·643e·0a20·2020·203c·2f74·723e···</td>.····</tr> | |||
| 00006890:·0a20·2020·203c·7472·3e0a·2020·2020·2020··.····<tr>.······ | |||
| 000068a0:·3c74·643e·312e·322e·323c·2f74·643e·0a20··<td>1.2.2</td>.· | |||
| 000068b0:·2020·2020·203c·7464·3e45·6e73·7572·6520·······<td>Ensure· | |||
| 000068c0:·6770·6763·6865·636b·2045·6e61·626c·6564··gpgcheck·Enabled | |||
| 000068d0:·2049·6e20·4d61·696e·2079·756d·2043·6f6e···In·Main·yum·Con | |||
| 000068e0:·6669·6775·7261·7469·6f6e·3c2f·7464·3e0a··figuration</td>. | |||
| 000068f0:·2020·2020·2020·3c74·6420·786d·6c3a·6c61········<td·xml:la | |||
| 00006900:·6e67·3d22·656e·2d55·5322·3e0a·2020·2020··ng="en-US">.···· | |||
| 00006910:·2020·2020·5468·6520·3c74·743e·6770·6763······The·<tt>gpgc | |||
| 00006920:·6865·636b·3c2f·7474·3e20·6f70·7469·6f6e··heck</tt>·option | |||
| 00006930:·2063·6f6e·7472·6f6c·7320·7768·6574·6865···controls·whethe | |||
| 00006940:·720a·5250·4d20·7061·636b·6167·6573·2720··r.RPM·packages'· | |||
| 00006950:·7369·676e·6174·7572·6573·2061·7265·2061··signatures·are·a | |||
| 00006960:·6c77·6179·7320·6368·6563·6b65·6420·7072··lways·checked·pr | |||
| 00006970:·696f·7220·746f·2069·6e73·7461·6c6c·6174··ior·to·installat | |||
| 00006980:·696f·6e2e·0a54·6f20·636f·6e66·6967·7572··ion..To·configur | |||
| 00006990:·6520·7975·6d20·746f·2063·6865·636b·2070··e·yum·to·check·p | |||
| 000069a0:·6163·6b61·6765·2073·6967·6e61·7475·7265··ackage·signature | |||
| 000069b0:·7320·6265·666f·7265·2069·6e73·7461·6c6c··s·before·install | |||
| 000069c0:·696e·670a·7468·656d·2c20·656e·7375·7265··ing.them,·ensure | |||
| 000069d0:·2074·6865·2066·6f6c·6c6f·7769·6e67·206c···the·following·l | |||
| 000069e0:·696e·6520·6170·7065·6172·7320·696e·203c··ine·appears·in·< | |||
| 000069f0:·7474·3e2f·6574·632f·7975·6d2e·636f·6e66··tt>/etc/yum.conf | |||
| Max diff block lines reached; 1098201/1115891 bytes (98.41%) of diff not shown. | |||
| Offset 367, 37 lines modified | Offset 367, 14 lines modified | ||
| 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as | 367 | ······································The·noexec·mount·option·can·be·used·to·prevent·········directories·such·as |
| 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should | 368 | 1.1.3.5.4·········Add·noexec·Option···binaries·from·being·executed·out·of·/var/tmp.·Add·the··/var/tmp·should |
| 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary | 369 | ··················to·/var/tmp·········noexec·option·to·the·fourth·column·of·/etc/fstab·for···never·be·necessary |
| 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation | 370 | ······································the·line·which·controls·mounting·of·/var/tmp.··········in·normal·operation |
| 371 | ·····························································································and·can·expose·the | 371 | ·····························································································and·can·expose·the |
| 372 | ·····························································································system·to·potential | 372 | ·····························································································system·to·potential |
| 373 | ·····························································································compromise. | 373 | ·····························································································compromise. |
| 374 | ·····························································································Verifying·the | ||
| 375 | ·····························································································authenticity·of·the | ||
| 376 | ·····························································································software·prior·to | ||
| 377 | ·····························································································installation | ||
| 378 | ·····························································································validates·the | ||
| 379 | ·····························································································integrity·of·the | ||
| 380 | ·····························································································patch·or·upgrade | ||
| 381 | ·····························································································received·from·a | ||
| 382 | ·····························································································vendor.·This·ensures | ||
| 383 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 384 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 385 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 386 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 387 | ·····························································································trusted·vendor. | ||
| 388 | ·····························································································Self-signed | ||
| 389 | ·····························································································certificates·are | ||
| 390 | ·····························································································disallowed·by·this | ||
| 391 | ·····························································································requirement. | ||
| 392 | ·····························································································Certificates·used·to | ||
| 393 | ·····························································································verify·the·software | ||
| 394 | ·····························································································must·be·from·an | ||
| 395 | ·····························································································approved·Certificate | ||
| 396 | ·····························································································Authority·(CA)." | ||
| 397 | ·····························································································Changes·to·any | 374 | ·····························································································Changes·to·any |
| 398 | ·····························································································software·components | 375 | ·····························································································software·components |
| 399 | ·····························································································can·have·significant | 376 | ·····························································································can·have·significant |
| 400 | ·····························································································effects·on·the | 377 | ·····························································································effects·on·the |
| 401 | ·····························································································overall·security·of | 378 | ·····························································································overall·security·of |
| 402 | ·····························································································the·operating | 379 | ·····························································································the·operating |
| 403 | ·····························································································system.·This | 380 | ·····························································································system.·This |
| Offset 437, 14 lines modified | Offset 414, 37 lines modified | ||
| 437 | ·····························································································disallowed·by·this | 414 | ·····························································································disallowed·by·this |
| 438 | ·····························································································requirement. | 415 | ·····························································································requirement. |
| 439 | ·····························································································Certificates·used·to | 416 | ·····························································································Certificates·used·to |
| 440 | ·····························································································verify·the·software | 417 | ·····························································································verify·the·software |
| 441 | ·····························································································must·be·from·an | 418 | ·····························································································must·be·from·an |
| 442 | ·····························································································approved·Certificate | 419 | ·····························································································approved·Certificate |
| 443 | ·····························································································Authority·(CA). | 420 | ·····························································································Authority·(CA). |
| 421 | ·····························································································Verifying·the | ||
| 422 | ·····························································································authenticity·of·the | ||
| 423 | ·····························································································software·prior·to | ||
| 424 | ·····························································································installation | ||
| 425 | ·····························································································validates·the | ||
| 426 | ·····························································································integrity·of·the | ||
| 427 | ·····························································································patch·or·upgrade | ||
| 428 | ·····························································································received·from·a | ||
| 429 | ·····························································································vendor.·This·ensures | ||
| 430 | ··················Ensure·gpgcheck·····To·ensure·signature·checking·is·not·disabled·for·any···the·software·has·not | ||
| 431 | ··················Enabled·for·All·yum·repos,·remove·any·lines·from·files·in·/etc/yum.repos.d·been·tampered·with | ||
| 432 | 1.2.2·············Package·············of·the·form:···········································and·that·it·has·been | ||
| 433 | ··················Repositories········gpgcheck=0·············································provided·by·a | ||
| 434 | ·····························································································trusted·vendor. | ||
| 435 | ·····························································································Self-signed | ||
| 436 | ·····························································································certificates·are | ||
| 437 | ·····························································································disallowed·by·this | ||
| 438 | ·····························································································requirement. | ||
| 439 | ·····························································································Certificates·used·to | ||
| 440 | ·····························································································verify·the·software | ||
| 441 | ·····························································································must·be·from·an | ||
| 442 | ·····························································································approved·Certificate | ||
| 443 | ·····························································································Authority·(CA)." | ||
| 444 | ·····························································································Password·protection | 444 | ·····························································································Password·protection |
| 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader | 445 | ······································The·grub2·boot·loader·should·have·a·superuser·account··on·the·boot·loader |
| 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration | 446 | ······································and·password·protection·enabled·to·protect·boot-time···configuration |
| 447 | ······································settings.··············································ensures·users·with | 447 | ······································settings.··············································ensures·users·with |
| 448 | ·····························································································physical·access | 448 | ·····························································································physical·access |
| 449 | 1.3.1·············Set·the·UEFI·Boot···Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 449 | 1.3.1·············Set·the·UEFI·Boot···Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 450 | ··················Loader·Password·····generate·a·hash·for·the·password·by·running·the········alter·important | 450 | ··················Loader·Password·····generate·a·hash·for·the·password·by·running·the········alter·important |
| Offset 461, 33 lines modified | Offset 461, 14 lines modified | ||
| 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially | 461 | 1.3.1·············Set·Boot·Loader·····Since·plaintext·passwords·are·a·security·risk,·········cannot·trivially |
| 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important | 462 | ··················Password·in·grub2···generate·a·hash·for·the·password·by·running·the········alter·important |
| 463 | ······································following·command:·····································bootloader·settings. | 463 | ······································following·command:·····································bootloader·settings. |
| 464 | ······································#·grub2-setpassword····································These·include·which | 464 | ······································#·grub2-setpassword····································These·include·which |
| 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and | 465 | ······································When·prompted,·enter·the·password·that·was·selected.···kernel·to·use,·and |
| 466 | ·····························································································whether·to·enter | 466 | ·····························································································whether·to·enter |
| 467 | ·····························································································single-user·mode. | 467 | ·····························································································single-user·mode. |
| 468 | ······································The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·······The·root·group·is·a | ||
| 469 | ··················Verify·the·UEFI·····group-owned·by·the·root·group·to·prevent·destruction···highly-privileged | ||
| 470 | ··················Boot·Loader·········or·modification·of·the·file.·To·properly·set·the·group·group.·Furthermore, | ||
| 471 | 1.3.2·············grub.cfg·Group······owner·of·/boot/efi/EFI/redhat/grub.cfg,·run·the········the·group-owner·of | ||
| 472 | ··················Ownership···········command:···············································this·file·should·not | ||
| 473 | ······································$·sudo·chgrp·root·/boot/efi/EFI/redhat/grub.cfg········have·any·access | ||
| 474 | ·····························································································privileges·anyway. | ||
| 475 | ······································File·permissions·for·/boot/grub2/grub.cfg·should·be····Proper·permissions | ||
| 476 | ··················Verify·/boot/grub2/·set·to·600.·To·properly·set·the·permissions·of·/boot/··ensure·that·only·the | ||
| 477 | 1.3.2·············grub.cfg············grub2/grub.cfg,·run·the·command:·······················root·user·can·modify | ||
| 478 | ··················Permissions·········$·sudo·chmod·600·/boot/grub2/grub.cfg··················important·boot | ||
| 479 | ·····························································································parameters. | ||
| 480 | ·····························································································The·root·group·is·a | ||
| 481 | ······································The·file·/boot/grub2/grub.cfg·should·be·group-owned·by·highly-privileged | ||
| 482 | ··················Verify·/boot/grub2/·the·root·group·to·prevent·destruction·or·modification··group.·Furthermore, | ||
| 483 | 1.3.2·············grub.cfg·Group······of·the·file.·To·properly·set·the·group·owner·of·/boot/·the·group-owner·of | ||
| 484 | ··················Ownership···········grub2/grub.cfg,·run·the·command:·······················this·file·should·not | ||
| 485 | ······································$·sudo·chgrp·root·/boot/grub2/grub.cfg·················have·any·access | ||
| 486 | ·····························································································privileges·anyway. | ||
| 487 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions | 468 | ······································File·permissions·for·/boot/efi/EFI/redhat/user.cfg·····Proper·permissions |
| 488 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the | 469 | ··················Verify·/boot/efi/···should·be·set·to·600.·To·properly·set·the·permissions··ensure·that·only·the |
| 489 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read | 470 | 1.3.2·············EFI/redhat/user.cfg·of·/boot/efi/EFI/redhat/user.cfg,·run·the·command:·····root·user·can·read |
| 490 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important | 471 | ··················Permissions·········$·sudo·chmod·600·/boot/efi/EFI/redhat/user.cfg·········or·modify·important |
| 491 | ·····························································································boot·parameters. | 472 | ·····························································································boot·parameters. |
| 492 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be | 473 | ··················Verify·the·UEFI·····The·file·/boot/efi/EFI/redhat/grub.cfg·should·be·owned·Only·root·should·be |
| 493 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify | 474 | ··················Boot·Loader·········by·the·root·user·to·prevent·destruction·or·············able·to·modify |
| Offset 502, 34 lines modified | Offset 483, 41 lines modified | ||
| 502 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot | 483 | 1.3.2·············EFI/redhat/user.cfg·the·file.·To·properly·set·the·owner·of·/boot/efi/EFI/··read·the·boot |
| 503 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be | 484 | ··················User·Ownership······redhat/user.cfg,·run·the·command:······················parameters·may·be |
| 504 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify | 485 | ······································$·sudo·chown·root·/boot/efi/EFI/redhat/user.cfg········able·to·identify |
| 505 | ·····························································································weaknesses·in | 486 | ·····························································································weaknesses·in |
| 506 | ·····························································································security·upon·boot | 487 | ·····························································································security·upon·boot |
| 507 | ·····························································································and·be·able·to | 488 | ·····························································································and·be·able·to |
| 508 | ·····························································································exploit·them. | 489 | ·····························································································exploit·them. |
| 509 | ·····························································································The·root·group·is·a | ||
| 510 | ·····························································································highly-privileged | ||
| 511 | ·····························································································group.·Furthermore, | ||
| 512 | ·····························································································the·group-owner·of | ||
| 513 | ·····························································································this·file·should·not | ||
| 514 | ······································The·file·/boot/grub2/ | 490 | ······································The·file·/boot/grub2/grub.cfg·should·be·owned·by·the···Only·root·should·be |
| 515 | ··················Verify·/boot/grub2/· | 491 | ··················Verify·/boot/grub2/·root·user·to·prevent·destruction·or·modification·of····able·to·modify |
| 516 | 1.3.2············· | 492 | 1.3.2·············grub.cfg·User·······the·file.·To·properly·set·the·owner·of·/boot/grub2/····important·boot |
| 517 | ··················Ownership···········grub | 493 | ··················Ownership···········grub.cfg,·run·the·command:·····························parameters. |
| 518 | ······································$·sudo·ch | 494 | ······································$·sudo·chown·root·/boot/grub2/grub.cfg |
| Max diff block lines reached; 325462/341926 bytes (95.18%) of diff not shown. | |||
| Offset 61, 48 lines modified | Offset 61, 36 lines modified | ||
| 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. | 61 | security·is·gained·by·extending·the·policy·of·not·logging·directly·on·as·root. |
| 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual | 62 | In·addition,·logging·in·with·a·user-specific·account·provides·individual |
| 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize | 63 | accountability·of·actions·performed·on·the·system·and·also·helps·to·minimize |
| 64 | direct·attack·attempts·on·root's·password. | 64 | direct·attack·attempts·on·root's·password. |
| 65 | ······</td> | 65 | ······</td> |
| 66 | ····</tr> | 66 | ····</tr> |
| 67 | ····<tr> | 67 | ····<tr> |
| 68 | ······<td>3.1.1</td> | ||
| 69 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 70 | ······<td·xml:lang="en-US"> | ||
| 71 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 72 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 73 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 74 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 75 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 76 | <pre>[daemon] | ||
| 77 | AutomaticLoginEnable=false</pre> | ||
| 78 | ······</td> | ||
| 79 | ······<td·xml:lang="en-US"> | ||
| 80 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 81 | system·security. | ||
| 82 | ······</td> | ||
| 83 | ····</tr> | ||
| 84 | ····<tr> | ||
| 85 | ······<td>3.1.1<br/>3.1.5</td> | 68 | ······<td>3.1.1<br/>3.1.5</td> |
| 86 | ······<td> | 69 | ······<td>Disable·SSH·Access·via·Empty·Passwords</td> |
| 87 | ······<td·xml:lang="en-US"> | 70 | ······<td·xml:lang="en-US"> |
| 88 | ········If·an·account·is·configured·for·password·authentication | ||
| 89 | but·does·not·have·an·assigned·password,·it·may·be·possible·to·log | ||
| 90 | into·the·account·without·authentication.·Remove·any·instances·of·the | ||
| 91 | 71 | ········Disallow·SSH·login·with·empty·passwords. | |
| 72 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 73 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 74 | <br·/> | ||
| 75 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 76 | add·or·correct·the·following·line·in | ||
| 92 | <tt>/etc/pam.d/system-auth</tt>·and | ||
| 93 | <tt>/etc/pam.d/password-auth</tt> | ||
| 94 | 77 | <tt>/etc/ssh/sshd_config</tt>: | |
| 78 | <br·/> | ||
| 79 | <pre>PermitEmptyPasswords·no</pre> | ||
| 80 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 81 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 95 | ······</td> | 82 | ······</td> |
| 96 | ······<td·xml:lang="en-US"> | 83 | ······<td·xml:lang="en-US"> |
| 97 | ········If·an·account·has·an·empty·password,·anyone·could·log·in·and | ||
| 98 | run·commands·with·the·privileges·of·that·account.·Accounts·with | ||
| 99 | 84 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | |
| 85 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 86 | misconfiguration·elsewhere. | ||
| 100 | ······</td> | 87 | ······</td> |
| 101 | ····</tr> | 88 | ····</tr> |
| 102 | ····<tr> | 89 | ····<tr> |
| 103 | ······<td>3.1.1<br/>3.1.5</td> | 90 | ······<td>3.1.1<br/>3.1.5</td> |
| 104 | ······<td>Restrict·Serial·Port·Root·Logins</td> | 91 | ······<td>Restrict·Serial·Port·Root·Logins</td> |
| 105 | ······<td·xml:lang="en-US"> | 92 | ······<td·xml:lang="en-US"> |
| 106 | ········To·restrict·root·logins·on·serial·ports, | 93 | ········To·restrict·root·logins·on·serial·ports, |
| Offset 130, 57 lines modified | Offset 118, 86 lines modified | ||
| 130 | ······</td> | 118 | ······</td> |
| 131 | ······<td·xml:lang="en-US"> | 119 | ······<td·xml:lang="en-US"> |
| 132 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | 120 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating |
| 133 | system·security. | 121 | system·security. |
| 134 | ······</td> | 122 | ······</td> |
| 135 | ····</tr> | 123 | ····</tr> |
| 136 | ····<tr> | 124 | ····<tr> |
| 125 | ······<td>3.1.1</td> | ||
| 126 | ······<td>Disable·GDM·Automatic·Login</td> | ||
| 127 | ······<td·xml:lang="en-US"> | ||
| 128 | ········The·GNOME·Display·Manager·(GDM)·can·allow·users·to·automatically·login·without | ||
| 129 | user·interaction·or·credentials.·User·should·always·be·required·to·authenticate·themselves | ||
| 130 | to·the·system·that·they·are·authorized·to·use.·To·disable·user·ability·to·automatically | ||
| 131 | login·to·the·system,·set·the·<tt>AutomaticLoginEnable</tt>·to·<tt>false</tt>·in·the | ||
| 132 | <tt>[daemon]</tt>·section·in·<tt>/etc/gdm/custom.conf</tt>.·For·example: | ||
| 133 | <pre>[daemon] | ||
| 134 | AutomaticLoginEnable=false</pre> | ||
| 135 | ······</td> | ||
| 136 | ······<td·xml:lang="en-US"> | ||
| 137 | ········Failure·to·restrict·system·access·to·authenticated·users·negatively·impacts·operating | ||
| 138 | system·security. | ||
| 139 | ······</td> | ||
| 140 | ····</tr> | ||
| 141 | ····<tr> | ||
| 137 | ······<td>3.1.1<br/>3.1.5</td> | 142 | ······<td>3.1.1<br/>3.1.5</td> |
| 138 | ······<td> | 143 | ······<td>Restrict·Virtual·Console·Root·Logins</td> |
| 139 | ······<td·xml:lang="en-US"> | 144 | ······<td·xml:lang="en-US"> |
| 145 | ········To·restrict·root·logins·through·the·(deprecated)·virtual·console·devices, | ||
| 146 | ensure·lines·of·this·form·do·not·appear·in·<tt>/etc/securetty</tt>: | ||
| 147 | <pre>vc/1 | ||
| 148 | vc/2 | ||
| 149 | vc/3 | ||
| 150 | vc/4</pre> | ||
| 140 | ········Disallow·SSH·login·with·empty·passwords. | ||
| 141 | The·default·SSH·configuration·disables·logins·with·empty·passwords.·The·appropriate | ||
| 142 | configuration·is·used·if·no·value·is·set·for·<tt>PermitEmptyPasswords</tt>. | ||
| 143 | <br·/> | ||
| 144 | To·explicitly·disallow·SSH·login·from·accounts·with·empty·passwords, | ||
| 145 | add·or·correct·the·following·line·in | ||
| 146 | <tt>/etc/ssh/sshd_config</tt>: | ||
| 147 | <br·/> | ||
| 148 | <pre>PermitEmptyPasswords·no</pre> | ||
| 149 | Any·accounts·with·empty·passwords·should·be·disabled·immediately,·and·PAM·configuration | ||
| 150 | should·prevent·users·from·being·able·to·assign·themselves·empty·passwords. | ||
| 151 | ······</td> | 151 | ······</td> |
| 152 | ······<td·xml:lang="en-US"> | 152 | ······<td·xml:lang="en-US"> |
| 153 | ········Configuring·this·setting·for·the·SSH·daemon·provides·additional·assurance | ||
| 154 | that·remote·login·via·SSH·will·require·a·password,·even·in·the·event·of | ||
| 155 | 153 | ········Preventing·direct·root·login·to·virtual·console·devices | |
| 154 | helps·ensure·accountability·for·actions·taken·on·the·system | ||
| 155 | using·the·root·account. | ||
| 156 | ······</td> | 156 | ······</td> |
| 157 | ····</tr> | 157 | ····</tr> |
| 158 | ····<tr> | 158 | ····<tr> |
| 159 | ······<td>3.1.1<br/>3.4.5</td> | 159 | ······<td>3.1.1<br/>3.4.5</td> |
| 160 | ······<td>Require·Authentication·for· | 160 | ······<td>Require·Authentication·for·Single·User·Mode</td> |
| 161 | ······<td·xml:lang="en-US"> | 161 | ······<td·xml:lang="en-US"> |
| 162 | ········ | 162 | ········Single-user·mode·is·intended·as·a·system·recovery |
| 163 | method,·providing·a·single·user·root·access·to·the·system | 163 | method,·providing·a·single·user·root·access·to·the·system·by |
| 164 | 164 | providing·a·boot·option·at·startup. | |
| 165 | <br·/><br·/> | 165 | <br·/><br·/> |
| 166 | By·default,· | 166 | By·default,·single-user·mode·is·protected·by·requiring·a·password·and·is·set |
| 167 | in·<tt>/usr/lib/systemd/system/ | 167 | in·<tt>/usr/lib/systemd/system/rescue.service</tt>. |
| Max diff block lines reached; 451036/456938 bytes (98.71%) of diff not shown. | |||
| Offset 24853, 18 lines modified | Offset 24853, 18 lines modified | ||
| 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | 00061140:·616e·6420·656e·6162·6c69·6e67·0a74·696d··and·enabling.tim | ||
| 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | 00061150:·652d·6261·7365·6420·6c69·6d69·742c·2065··e-based·limit,·e | ||
| 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | 00061160:·6666·6563·7473·206f·6620·706f·7465·6e74··ffects·of·potent | ||
| 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | 00061170:·6961·6c20·6174·7461·636b·7320·6167·6169··ial·attacks·agai | ||
| 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | 00061180:·6e73·740a·656e·6372·7970·7469·6f6e·206b··nst.encryption·k | ||
| 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | 00061190:·6579·7320·6172·6520·6c69·6d69·7465·642e··eys·are·limited. | ||
| 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | 000611a0:·0a20·203c·2f74·643e·0a20·203c·7464·3e76··.··</td>.··<td>v | ||
| 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f7 | 000611b0:·6172·5f72·656b·6579·5f6c·696d·6974·5f74··ar_rekey_limit_t | ||
| 000611c0:·697a·653d·3147·3c62·722f·3e76·6172·5f72··ize=1G<br/>var_r | |||
| 000611 | 000611c0:·696d·653d·3168·6f75·723c·6272·2f3e·7661··ime=1hour<br/>va | ||
| 000611d0:·725f·7265·6b65·795f·6c69·6d69·745f·7369··r_rekey_limit_si | |||
| 000611e0:· | 000611e0:·7a65·3d31·473c·2f74·643e·0a3c·2f74·723e··ze=1G</td>.</tr> | ||
| 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | 000611f0:·0a3c·7472·3e0a·2020·3c74·643e·3c2f·7464··.<tr>.··<td></td | ||
| 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | 00061200:·3e0a·2020·3c74·643e·4343·452d·3832·3436··>.··<td>CCE-8246 | ||
| 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | 00061210:·322d·333c·2f74·643e·0a20·203c·7464·3e53··2-3</td>.··<td>S | ||
| 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | 00061220:·5348·2073·6572·7665·7220·7573·6573·2073··SH·server·uses·s | ||
| 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | 00061230:·7472·6f6e·6720·656e·7472·6f70·7920·746f··trong·entropy·to | ||
| 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | 00061240:·2073·6565·643c·2f74·643e·0a20·203c·7464···seed</td>.··<td | ||
| 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | 00061250:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US |
| Offset 7818, 16 lines modified | Offset 7818, 16 lines modified | ||
| 7818 | ·····································corresponding·private·key.····························system·where·the | 7818 | ·····································corresponding·private·key.····························system·where·the |
| 7819 | ···························································································associated·public | 7819 | ···························································································associated·public |
| 7820 | ···························································································key·has·been | 7820 | ···························································································key·has·been |
| 7821 | ···························································································installed. | 7821 | ···························································································installed. |
| 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the | 7822 | ·····································The·RekeyLimit·parameter·specifies·how·often·the······By·decreasing·the |
| 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the | 7823 | ·····································session·key·of·the·is·renegotiated,·both·in·terms·of··limit·based·on·the |
| 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and | 7824 | ········CCE-···Force·frequent········amount·of·data·that·may·be·transmitted·and·the·time···amount·of·data·and |
| 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_ | 7825 | ········82177-·session·key···········elapsed.··············································enabling·time-based·var_rekey_limit_time=1hour |
| 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_ | 7826 | ········7······renegotiation·········To·decrease·the·default·limits,·add·or·correct·the····limit,·effects·of···var_rekey_limit_size=1G |
| 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks | 7827 | ·····································following·line·in·/etc/ssh/sshd_config:···············potential·attacks |
| 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption | 7828 | ·····································RekeyLimit·1G·1hour···································against·encryption |
| 7829 | ···························································································keys·are·limited. | 7829 | ···························································································keys·are·limited. |
| 7830 | ···························································································SSH·implementation | 7830 | ···························································································SSH·implementation |
| 7831 | ···························································································in·Red·Hat | 7831 | ···························································································in·Red·Hat |
| 7832 | ···························································································Enterprise·Linux·8 | 7832 | ···························································································Enterprise·Linux·8 |
| 7833 | ···························································································uses·the·openssl | 7833 | ···························································································uses·the·openssl |
| Offset 68, 15097 lines modified | Offset 68, 15097 lines modified | ||
| 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | 00000430:·3e52·6174·696f·6e61·6c65·3c2f·7468·3e0a··>Rationale</th>. | ||
| 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | 00000440:·2020·3c2f·7468·6561·643e·0a20·203c·7462····</thead>.··<tb | ||
| 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | 00000450:·6f64·793e·0a20·203c·7472·3e0a·2020·2020··ody>.··<tr>.···· | ||
| 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | 00000460:·2020·3c74·643e·4155·2d32·2864·293c·6272····<td>AU-2(d)<br | ||
| 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | 00000470:·2f3e·4155·2d31·3228·6329·3c62·722f·3e41··/>AU-12(c)<br/>A | ||
| 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | 00000480:·432d·3628·3929·3c62·722f·3e43·4d2d·3628··C-6(9)<br/>CM-6( | Diff chunk too large, falling back to line-by-line diff (1379 lines added, 1379 lines removed) | |
| 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | 00000490:·6129·3c2f·7464·3e0a·2020·2020·2020·3c74··a)</td>.······<t | ||
| 000004a0:·643e· | 000004a0:·643e·5265·636f·7264·2041·6e79·2041·7474··d>Record·Any·Att | ||
| 000004b0:· | 000004b0:·656d·7074·7320·746f·2052·756e·2063·6863··empts·to·Run·chc | ||
| 000004c0:· | 000004c0:·6f6e·3c2f·7464·3e0a·2020·2020·2020·3c74··on</td>.······<t | ||
| 000004d0:·6 | 000004d0:·6420·786d·6c3a·6c61·6e67·3d22·656e·2d55··d·xml:lang="en-U | ||
| 000004e0:· | 000004e0:·5322·3e0a·2020·2020·2020·2020·4174·2061··S">.········At·a | ||
| 000004f0:· | 000004f0:·206d·696e·696d·756d·2c20·7468·6520·6175···minimum,·the·au | ||
| 00000500:·64 | 00000500:·6469·7420·7379·7374·656d·2073·686f·756c··dit·system·shoul | ||
| 00000510:· | 00000510:·6420·636f·6c6c·6563·7420·616e·7920·6578··d·collect·any·ex | ||
| 00000520:· | 00000520:·6563·7574·696f·6e20·6174·7465·6d70·740a··ecution·attempt. | ||
| 00000530:·6 | 00000530:·6f66·2074·6865·203c·7474·3e63·6863·6f6e··of·the·<tt>chcon | ||
| 00000540:· | 00000540:·3c2f·7474·3e20·636f·6d6d·616e·6420·666f··</tt>·command·fo | ||
| 00000550:· | 00000550:·7220·616c·6c20·7573·6572·7320·616e·6420··r·all·users·and· | ||
| 00000560:· | 00000560:·726f·6f74·2e20·4966·2074·6865·203c·7474··root.·If·the·<tt | ||
| 00000570:· | 00000570:·3e61·7564·6974·643c·2f74·743e·0a64·6165··>auditd</tt>.dae | ||
| 00000580:· | 00000580:·6d6f·6e20·6973·2063·6f6e·6669·6775·7265··mon·is·configure | ||
| 00000590:· | 00000590:·6420·746f·2075·7365·2074·6865·203c·7474··d·to·use·the·<tt | ||
| 000005a0:· | 000005a0:·3e61·7567·656e·7275·6c65·733c·2f74·743e··>augenrules</tt> | ||
| 000005b0:· | 000005b0:·2070·726f·6772·616d·2074·6f20·7265·6164···program·to·read | ||
| 000005c0:· | 000005c0:·2061·7564·6974·2072·756c·6573·0a64·7572···audit·rules.dur | ||
| 000005d0:· | 000005d0:·696e·6720·6461·656d·6f6e·2073·7461·7274··ing·daemon·start | ||
| 000005e0:· | 000005e0:·7570·2028·7468·6520·6465·6661·756c·7429··up·(the·default) | ||
| 000005f0:· | 000005f0:·2c20·6164·6420·7468·6520·666f·6c6c·6f77··,·add·the·follow | ||
| 00000600:· | 00000600:·696e·6720·6c69·6e65·7320·746f·2061·2066··ing·lines·to·a·f | ||
| 00000610:· | 00000610:·696c·6520·7769·7468·2073·7566·6669·780a··ile·with·suffix. | ||
| 00000620:· | 00000620:·3c74·743e·2e72·756c·6573·3c2f·7474·3e20··<tt>.rules</tt>· | ||
| 00000630:·6 | 00000630:·696e·2074·6865·2064·6972·6563·746f·7279··in·the·directory | ||
| 00000640:· | 00000640:·203c·7474·3e2f·6574·632f·6175·6469·742f···<tt>/etc/audit/ | ||
| 00000650:·756c | 00000650:·7275·6c65·732e·643c·2f74·743e·3a0a·3c70··rules.d</tt>:.<p | ||
| 00000660:·2 | 00000660:·7265·3e2d·6120·616c·7761·7973·2c65·7869··re>-a·always,exi | ||
| 00000670:· | 00000670:·7420·2d46·2070·6174·683d·2f75·7372·2f62··t·-F·path=/usr/b | ||
| 00000680:·6 | 00000680:·696e·2f63·6863·6f6e·202d·4620·7065·726d··in/chcon·-F·perm | ||
| 00000690:· | 00000690:·3d78·202d·4620·6175·6964·2667·743b·3d31··=x·-F·auid>=1 | ||
| 000006a0:· | 000006a0:·3030·3020·2d46·2061·7569·6421·3d75·6e73··000·-F·auid!=uns | ||
| 000006b0:· | 000006b0:·6574·202d·4620·6b65·793d·7072·6976·696c··et·-F·key=privil | ||
| 000006c0:· | 000006c0:·6567·6564·3c2f·7072·653e·0a49·6620·7468··eged</pre>.If·th | ||
| 000006d0:· | 000006d0:·6520·3c74·743e·6175·6469·7464·3c2f·7474··e·<tt>auditd</tt | ||
| 000006e0:· | 000006e0:·3e20·6461·656d·6f6e·2069·7320·636f·6e66··>·daemon·is·conf | ||
| 000006f0:·67 | 000006f0:·6967·7572·6564·2074·6f20·7573·6520·7468··igured·to·use·th | ||
| 00000700:·203c | 00000700:·6520·3c74·743e·6175·6469·7463·746c·3c2f··e·<tt>auditctl</ | ||
| 00000710:· | 00000710:·7474·3e0a·7574·696c·6974·7920·746f·2072··tt>.utility·to·r | ||
| 00000720:·6 | 00000720:·6561·6420·6175·6469·7420·7275·6c65·7320··ead·audit·rules· | ||
| 00000730:· | 00000730:·6475·7269·6e67·2064·6165·6d6f·6e20·7374··during·daemon·st | ||
| 00000740:· | 00000740:·6172·7475·702c·2061·6464·2074·6865·2066··artup,·add·the·f | ||
| 00000750:·6 | 00000750:·6f6c·6c6f·7769·6e67·206c·696e·6573·2074··ollowing·lines·t | ||
| 00000760:· | 00000760:·6f0a·3c74·743e·2f65·7463·2f61·7564·6974··o.<tt>/etc/audit | ||
| 00000770:· | 00000770:·2f61·7564·6974·2e72·756c·6573·3c2f·7474··/audit.rules</tt | ||
| 00000780:· | 00000780:·3e20·6669·6c65·3a0a·3c70·7265·3e2d·6120··>·file:.<pre>-a· | ||
| 00000790:·6 | 00000790:·616c·7761·7973·2c65·7869·7420·2d46·2070··always,exit·-F·p | ||
| 000007a0:·7463·2f | 000007a0:·6174·683d·2f75·7372·2f62·696e·2f63·6863··ath=/usr/bin/chc | ||
| 000007b0:· | 000007b0:·6f6e·202d·4620·7065·726d·3d78·202d·4620··on·-F·perm=x·-F· | ||
| 000007c0:· | 000007c0:·6175·6964·2667·743b·3d31·3030·3020·2d46··auid>=1000·-F | ||
| 000007d0:· | 000007d0:·2061·7569·6421·3d75·6e73·6574·202d·4620···auid!=unset·-F· | ||
| 000007e0:· | 000007e0:·6b65·793d·7072·6976·696c·6567·6564·3c2f··key=privileged</ | ||
| 000007f0:·7 | 000007f0:·7072·653e·0a20·2020·2020·203c·2f74·643e··pre>.······</td> | ||
| 00000800:· | 00000800:·0a20·2020·2020·203c·7464·2078·6d6c·3a6c··.······<td·xml:l | ||
| 00000810:·6 | 00000810:·616e·673d·2265·6e2d·5553·223e·0a20·2020··ang="en-US">.··· | ||
| 00000820:· | 00000820:·2020·2020·204d·6973·7573·6520·6f66·2070·······Misuse·of·p | ||
| 00000830:· | 00000830:·7269·7669·6c65·6765·6420·6675·6e63·7469··rivileged·functi | ||
| 00000840:· | 00000840:·6f6e·732c·2065·6974·6865·7220·696e·7465··ons,·either·inte | ||
| 00000850:· | 00000850:·6e74·696f·6e61·6c6c·7920·6f72·2075·6e69··ntionally·or·uni | ||
| 00000860:· | 00000860:·6e74·656e·7469·6f6e·616c·6c79·2062·790a··ntentionally·by. | ||
| 00000870:·6 | 00000870:·6175·7468·6f72·697a·6564·2075·7365·7273··authorized·users | ||
| 00000880:· | 00000880:·2c20·6f72·2062·7920·756e·6175·7468·6f72··,·or·by·unauthor | ||
| 00000890:· | 00000890:·697a·6564·2065·7874·6572·6e61·6c20·656e··ized·external·en | ||
| 000008a0:· | 000008a0:·7469·7469·6573·2074·6861·7420·6861·7665··tities·that·have | ||
| 000008b0:· | 000008b0:·2063·6f6d·7072·6f6d·6973·6564·2073·7973···compromised·sys | ||
| 000008c0:·7 | 000008c0:·7465·6d20·6163·636f·756e·7473·2c0a·6973··tem·accounts,.is | ||
| 000008d0:· | 000008d0:·2061·2073·6572·696f·7573·2061·6e64·206f···a·serious·and·o | ||
| 000008e0:·6 | 000008e0:·6e67·6f69·6e67·2063·6f6e·6365·726e·2061··ngoing·concern·a | ||
| 000008f0:·6 | 000008f0:·6e64·2063·616e·2068·6176·6520·7369·676e··nd·can·have·sign | ||
| 00000900:· | 00000900:·6966·6963·616e·7420·6164·7665·7273·6520··ificant·adverse· | ||
| 00000910:· | 00000910:·696d·7061·6374·7320·6f6e·206f·7267·616e··impacts·on·organ | ||
| 00000920:·6 | 00000920:·697a·6174·696f·6e73·2e0a·4175·6469·7469··izations..Auditi | ||
| 00000930:·6 | 00000930:·6e67·2074·6865·2075·7365·206f·6620·7072··ng·the·use·of·pr | ||
| 00000940:·6 | 00000940:·6976·696c·6567·6564·2066·756e·6374·696f··ivileged·functio | ||
| 00000950:·6 | 00000950:·6e73·2069·7320·6f6e·6520·7761·7920·746f··ns·is·one·way·to | ||
| 00000960:·2 | 00000960:·2064·6574·6563·7420·7375·6368·206d·6973···detect·such·mis | ||
| 00000970:·7365 | 00000970:·7573·6520·616e·6420·6964·656e·7469·6679··use·and·identify | ||
| 00000980:· | 00000980:·0a74·6865·2072·6973·6b20·6672·6f6d·2069··.the·risk·from·i | ||
| 00000990:·6 | 00000990:·6e73·6964·6572·2061·6e64·2061·6476·616e··nsider·and·advan | ||
| 000009a0:· | 000009a0:·6365·6420·7065·7273·6973·7465·6e74·2074··ced·persistent·t | ||
| 000009b0:·6 | 000009b0:·6872·6561·7473·2e0a·3c62·7220·2f3e·3c62··hreats..<br·/><b | ||
| 000009c0:· | 000009c0:·7220·2f3e·0a50·7269·7669·6c65·6765·6420··r·/>.Privileged· | ||
| 000009d0:·6 | 000009d0:·7072·6f67·7261·6d73·2061·7265·2073·7562··programs·are·sub | ||
| 000009e0:·6 | 000009e0:·6a65·6374·2074·6f20·6573·6361·6c61·7469··ject·to·escalati | ||
| 000009f0:· | 000009f0:·6f6e·2d6f·662d·7072·6976·696c·6567·6520··on-of-privilege· | ||
| 00000a00:· | 00000a00:·6174·7461·636b·732c·0a77·6869·6368·2061··attacks,.which·a | ||
| 00000a10:· | 00000a10:·7474·656d·7074·2074·6f20·7375·6276·6572··ttempt·to·subver | ||
| 00000a20:· | 00000a20:·7420·7468·6569·7220·6e6f·726d·616c·2072··t·their·normal·r | ||
| 00000a30:·6 | 00000a30:·6f6c·6520·6f66·2070·726f·7669·6469·6e67··ole·of·providing | ||
| 00000a40:· | 00000a40:·2073·6f6d·6520·6e65·6365·7373·6172·7920···some·necessary· | ||
| 00000a50:·6 | 00000a50:·6275·740a·6c69·6d69·7465·6420·6361·7061··but.limited·capa | ||
| 00000a60:·6 | 00000a60:·6269·6c69·7479·2e20·4173·2073·7563·682c··bility.·As·such, | ||
| 00000a70:· | 00000a70:·206d·6f74·6976·6174·696f·6e20·6578·6973···motivation·exis | ||
| 00000a80:· | 00000a80:·7473·2074·6f20·6d6f·6e69·746f·7220·7468··ts·to·monitor·th | ||
| 00000a90:· | 00000a90:·6573·6520·7072·6f67·7261·6d73·2066·6f72··ese·programs·for | ||
| 00000aa0:· | 00000aa0:·0a75·6e75·7375·616c·2061·6374·6976·6974··.unusual·activit | ||
| 00000ab0:· | 00000ab0:·792e·0a20·2020·2020·203c·2f74·643e·0a20··y..······</td>.· | ||
| 00000ac0:· | 00000ac0:·2020·203c·2f74·723e·0a20·2020·203c·7472·····</tr>.····<tr | ||
| 00000ad0:· | 00000ad0:·3e0a·2020·2020·2020·3c74·643e·4155·2d32··>.······<td>AU-2 | ||
| 00000ae0:·2 | 00000ae0:·2864·293c·6272·2f3e·4155·2d31·3228·6329··(d)<br/>AU-12(c) | ||
| 00000af0:· | 00000af0:·3c62·722f·3e43·4d2d·3628·6129·3c2f·7464··<br/>CM-6(a)</td | ||
| 00000b00:·0a20·2020·20 | 00000b00:·3e0a·2020·2020·2020·3c74·643e·5265·636f··>.······<td>Reco | ||
| 00000b10:· | 00000b10:·7264·2055·6e73·7563·6365·7373·6675·6c20··rd·Unsuccessful· | ||
| 00000b20:·4 | 00000b20:·4465·6c65·7465·2041·7474·656d·7074·7320··Delete·Attempts· | ||
| 00000b30:· | 00000b30:·746f·2046·696c·6573·202d·2075·6e6c·696e··to·Files·-·unlin | ||
| 00000b40:·3c74·643e· | 00000b40:·6b3c·2f74·643e·0a20·2020·2020·203c·7464··k</td>.······<td | ||
| 00000b50:· | 00000b50:·2078·6d6c·3a6c·616e·673d·2265·6e2d·5553···xml:lang="en-US | ||
| 00000b60:· | 00000b60:·223e·0a20·2020·2020·2020·200a·5468·6520··">.········.The· | ||
| 00000b70:·6 | 00000b70:·6175·6469·7420·7379·7374·656d·2073·686f··audit·system·sho | ||
| 00000b80:· | 00000b80:·756c·6420·636f·6c6c·6563·7420·756e·7375··uld·collect·unsu | ||
| 00000b90:·6 | 00000b90:·6363·6573·7366·756c·2066·696c·6520·6465··ccessful·file·de | ||
| 00000ba0:· | 00000ba0:·6c65·7469·6f6e·0a61·7474·656d·7074·7320··letion.attempts· | ||
| 00000bb0:· | 00000bb0:·666f·7220·616c·6c20·7573·6572·7320·616e··for·all·users·an | ||
| 00000bc0:·6 | 00000bc0:·6420·726f·6f74·2e20·4966·2074·6865·203c··d·root.·If·the·< | ||
| 00000bd0:· | 00000bd0:·7474·3e61·7564·6974·643c·2f74·743e·2064··tt>auditd</tt>·d | ||
| 00000be0:· | 00000be0:·6165·6d6f·6e20·6973·2063·6f6e·6669·6775··aemon·is·configu | ||
| 00000bf0:·726 | 00000bf0:·7265·640a·746f·2075·7365·2074·6865·203c··red.to·use·the·< | ||
| 00000c00:· | 00000c00:·7474·3e61·7567·656e·7275·6c65·733c·2f74··tt>augenrules</t | ||
| Max diff block lines reached; 7114884/7305764 bytes (97.39%) of diff not shown. | |||
| Offset 127, 26 lines modified | Offset 127, 14 lines modified | ||
| 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also | 127 | attacker·to·monitor·and·record·network·traffic.·These·malicious·APs·can·also |
| 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of | 128 | serve·to·create·a·man-in-the-middle·attack·or·be·used·to·create·a·denial·of |
| 129 | service·to·valid·network·resources. | 129 | service·to·valid·network·resources. |
| 130 | ······</td> | 130 | ······</td> |
| 131 | ····</tr> | 131 | ····</tr> |
| 132 | ····<tr> | 132 | ····<tr> |
| 133 | ······<td>Req-1.4</td> | 133 | ······<td>Req-1.4</td> |
| 134 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 135 | ······<td·xml:lang="en-US"> | ||
| 136 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 137 | traffic. | ||
| 138 | ······</td> | ||
| 139 | ······<td·xml:lang="en-US"> | ||
| 140 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 141 | packets·to·these·ports. | ||
| 142 | ······</td> | ||
| 143 | ····</tr> | ||
| 144 | ····<tr> | ||
| 145 | ······<td>Req-1.4</td> | ||
| 146 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> | 134 | ······<td>Set·Default·firewalld·Zone·for·Incoming·Packets</td> |
| 147 | ······<td·xml:lang="en-US"> | 135 | ······<td·xml:lang="en-US"> |
| 148 | ········To·set·the·default·zone·to·<tt>drop</tt>·for | 136 | ········To·set·the·default·zone·to·<tt>drop</tt>·for |
| 149 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, | 137 | the·built-in·default·zone·which·processes·incoming·IPv4·and·IPv6·packets, |
| 150 | modify·the·following·line·in | 138 | modify·the·following·line·in |
| 151 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: | 139 | <tt>/etc/firewalld/firewalld.conf</tt>·to·be: |
| 152 | <pre>DefaultZone=drop</pre> | 140 | <pre>DefaultZone=drop</pre> |
| Offset 156, 14 lines modified | Offset 144, 26 lines modified | ||
| 156 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the | 144 | the·applicable·rules·in·the·table·are·examined·for·a·match.·Setting·the |
| 157 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. | 145 | default·zone·to·<tt>drop</tt>·implements·proper·design·for·a·firewall,·i.e. |
| 158 | any·packets·which·are·not·explicitly·permitted·should·not·be | 146 | any·packets·which·are·not·explicitly·permitted·should·not·be |
| 159 | accepted. | 147 | accepted. |
| 160 | ······</td> | 148 | ······</td> |
| 161 | ····</tr> | 149 | ····</tr> |
| 162 | ····<tr> | 150 | ····<tr> |
| 151 | ······<td>Req-1.4</td> | ||
| 152 | ······<td>Ensure·firewall·rules·exist·for·all·open·ports</td> | ||
| 153 | ······<td·xml:lang="en-US"> | ||
| 154 | ········Any·ports·that·have·been·opened·on·non-loopback·addresses·need·firewall·rules·to·govern | ||
| 155 | traffic. | ||
| 156 | ······</td> | ||
| 157 | ······<td·xml:lang="en-US"> | ||
| 158 | ········Without·a·firewall·rule·configured·for·open·ports·default·firewall·policy·will·drop·all | ||
| 159 | packets·to·these·ports. | ||
| 160 | ······</td> | ||
| 161 | ····</tr> | ||
| 162 | ····<tr> | ||
| 163 | ······<td>Req-1.4.1</td> | 163 | ······<td>Req-1.4.1</td> |
| 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> | 164 | ······<td>Set·nftables·Configuration·for·Loopback·Traffic</td> |
| 165 | ······<td·xml:lang="en-US"> | 165 | ······<td·xml:lang="en-US"> |
| 166 | ········Configure·the·loopback·interface·to·accept·traffic. | 166 | ········Configure·the·loopback·interface·to·accept·traffic. |
| 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback | 167 | Configure·all·other·interfaces·to·deny·traffic·to·the·loopback |
| 168 | network. | 168 | network. |
| 169 | ······</td> | 169 | ······</td> |
| Offset 246, 14 lines modified | Offset 246, 41 lines modified | ||
| 246 | ······<td·xml:lang="en-US"> | 246 | ······<td·xml:lang="en-US"> |
| 247 | ········Disabling·DCCP·protects | 247 | ········Disabling·DCCP·protects |
| 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. | 248 | the·system·against·exploitation·of·any·flaws·in·its·implementation. |
| 249 | ······</td> | 249 | ······</td> |
| 250 | ····</tr> | 250 | ····</tr> |
| 251 | ····<tr> | 251 | ····<tr> |
| 252 | ······<td>Req-1.4.3</td> | 252 | ······<td>Req-1.4.3</td> |
| 253 | ······<td>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</td> | ||
| 254 | ······<td·xml:lang="en-US"> | ||
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_ignore_bogus_error_responses</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_ignore_bogus_error_responses=1</pre> | ||
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_ignore_bogus_error_responses·=·1</pre> | ||
| 257 | ······</td> | ||
| 258 | ······<td·xml:lang="en-US"> | ||
| 259 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 260 | log·size,·although·some·activity·would·not·be·logged. | ||
| 261 | ······</td> | ||
| 262 | ····</tr> | ||
| 263 | ····<tr> | ||
| 264 | ······<td>Req-1.4.3</td> | ||
| 265 | ······<td>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</td> | ||
| 266 | ······<td·xml:lang="en-US"> | ||
| 267 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.icmp_echo_ignore_broadcasts</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.icmp_echo_ignore_broadcasts=1</pre> | ||
| 268 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.icmp_echo_ignore_broadcasts·=·1</pre> | ||
| 269 | ······</td> | ||
| 270 | ······<td·xml:lang="en-US"> | ||
| 271 | ········Responding·to·broadcast·(ICMP)·echoes·facilitates·network·mapping | ||
| 272 | and·provides·a·vector·for·amplification·attacks. | ||
| 273 | <br·/> | ||
| 274 | Ignoring·ICMP·echo·requests·(pings)·sent·to·broadcast·or·multicast | ||
| 275 | addresses·makes·the·system·slightly·more·difficult·to·enumerate·on·the·network. | ||
| 276 | ······</td> | ||
| 277 | ····</tr> | ||
| 278 | ····<tr> | ||
| 279 | ······<td>Req-1.4.3</td> | ||
| 253 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> | 280 | ······<td>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv6·Interfaces·by·Default</td> |
| 254 | ······<td·xml:lang="en-US"> | 281 | ······<td·xml:lang="en-US"> |
| 255 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> | 282 | ········To·set·the·runtime·status·of·the·<code>net.ipv6.conf.default.accept_source_route</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv6.conf.default.accept_source_route=0</pre> |
| 256 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> | 283 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv6.conf.default.accept_source_route·=·0</pre> |
| 257 | ······</td> | 284 | ······</td> |
| 258 | ······<td·xml:lang="en-US"> | 285 | ······<td·xml:lang="en-US"> |
| 259 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers | 286 | ········Source-routed·packets·allow·the·source·of·the·packet·to·suggest·routers |
| Offset 277, 22 lines modified | Offset 304, 25 lines modified | ||
| 277 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as | 304 | ········Accepting·"secure"·ICMP·redirects·(from·those·gateways·listed·as |
| 278 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is | 305 | default·gateways)·has·few·legitimate·uses.·It·should·be·disabled·unless·it·is |
| 279 | absolutely·required. | 306 | absolutely·required. |
| 280 | ······</td> | 307 | ······</td> |
| 281 | ····</tr> | 308 | ····</tr> |
| 282 | ····<tr> | 309 | ····<tr> |
| 283 | ······<td>Req-1.4.3</td> | 310 | ······<td>Req-1.4.3</td> |
| 284 | ······<td>Enable·Kernel·Parameter·to· | 311 | ······<td>Enable·Kernel·Parameter·to·Use·Reverse·Path·Filtering·on·all·IPv4·Interfaces</td> |
| 285 | ······<td·xml:lang="en-US"> | 312 | ······<td·xml:lang="en-US"> |
| 286 | ········To·set·the·runtime·status·of·the·<code>net.ipv4. | 313 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.all.rp_filter</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1</pre> |
| 287 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4. | 314 | To·make·sure·that·the·setting·is·persistent,·add·the·following·line·to·a·file·in·the·directory·<tt>/etc/sysctl.d</tt>:·<pre>net.ipv4.conf.all.rp_filter·=·1</pre> |
| 288 | ······</td> | 315 | ······</td> |
| 289 | ······<td·xml:lang="en-US"> | 316 | ······<td·xml:lang="en-US"> |
| 290 | ········Ignoring·bogus·ICMP·error·responses·reduces | ||
| 291 | l | 317 | ········Enabling·reverse·path·filtering·drops·packets·with·source·addresses |
| 318 | that·should·not·have·been·able·to·be·received·on·the·interface·they·were | ||
| 319 | received·on.·It·should·not·be·used·on·systems·which·are·routers·for | ||
| 320 | complicated·networks,·but·is·helpful·for·end·hosts·and·routers·serving·small | ||
| 321 | networks. | ||
| 292 | ······</td> | 322 | ······</td> |
| 293 | ····</tr> | 323 | ····</tr> |
| 294 | ····<tr> | 324 | ····<tr> |
| 295 | ······<td>Req-1.4.3</td> | 325 | ······<td>Req-1.4.3</td> |
| 296 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> | 326 | ······<td>Disable·Kernel·Parameter·for·Accepting·ICMP·Redirects·by·Default·on·IPv4·Interfaces</td> |
| 297 | ······<td·xml:lang="en-US"> | 327 | ······<td·xml:lang="en-US"> |
| 298 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> | 328 | ········To·set·the·runtime·status·of·the·<code>net.ipv4.conf.default.accept_redirects</code>·kernel·parameter,·run·the·following·command:·<pre>$·sudo·sysctl·-w·net.ipv4.conf.default.accept_redirects=0</pre> |
| Offset 304, 44 lines modified | Offset 334, 14 lines modified | ||
| 304 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect | 334 | host's·route·table·and·are·unauthenticated.·An·illicit·ICMP·redirect |
| 305 | message·could·result·in·a·man-in-the-middle·attack. | 335 | message·could·result·in·a·man-in-the-middle·attack. |
| 306 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should | 336 | <br·/>This·feature·of·the·IPv4·protocol·has·few·legitimate·uses.·It·should |
| 307 | be·disabled·unless·absolutely·required. | 337 | be·disabled·unless·absolutely·required. |
| Max diff block lines reached; 292725/299541 bytes (97.72%) of diff not shown. | |||
| Offset 90, 21 lines modified | Offset 90, 14 lines modified | ||
| 90 | ····················································································also·serve·to | 90 | ····················································································also·serve·to |
| 91 | ····················································································create·a·man-in- | 91 | ····················································································create·a·man-in- |
| 92 | ····················································································the-middle·attack | 92 | ····················································································the-middle·attack |
| 93 | ····················································································or·be·used·to | 93 | ····················································································or·be·used·to |
| 94 | ····················································································create·a·denial·of | 94 | ····················································································create·a·denial·of |
| 95 | ····················································································service·to·valid | 95 | ····················································································service·to·valid |
| 96 | ····················································································network·resources. | 96 | ····················································································network·resources. |
| 97 | ····················································································Without·a·firewall | ||
| 98 | ····················································································rule·configured·for | ||
| 99 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 100 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 101 | ·········open·ports·································································will·drop·all | ||
| 102 | ····················································································packets·to·these | ||
| 103 | ····················································································ports. | ||
| 104 | ····················································································In·firewalld·the | 97 | ····················································································In·firewalld·the |
| 105 | ····················································································default·zone·is | 98 | ····················································································default·zone·is |
| 106 | ····················································································applied·only·after | 99 | ····················································································applied·only·after |
| 107 | ····················································································all·the·applicable | 100 | ····················································································all·the·applicable |
| 108 | ····················································································rules·in·the·table | 101 | ····················································································rules·in·the·table |
| 109 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a | 102 | ·····························To·set·the·default·zone·to·drop·for·the·built-in·······are·examined·for·a |
| 110 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the | 103 | ·········Set·Default·········default·zone·which·processes·incoming·IPv4·and·IPv6····match.·Setting·the |
| Offset 112, 14 lines modified | Offset 105, 21 lines modified | ||
| 112 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements | 105 | ·········Incoming·Packets····firewalld.conf·to·be:··································drop·implements |
| 113 | ·····························DefaultZone=drop·······································proper·design·for·a | 106 | ·····························DefaultZone=drop·······································proper·design·for·a |
| 114 | ····················································································firewall,·i.e.·any | 107 | ····················································································firewall,·i.e.·any |
| 115 | ····················································································packets·which·are | 108 | ····················································································packets·which·are |
| 116 | ····················································································not·explicitly | 109 | ····················································································not·explicitly |
| 117 | ····················································································permitted·should | 110 | ····················································································permitted·should |
| 118 | ····················································································not·be·accepted. | 111 | ····················································································not·be·accepted. |
| 112 | ····················································································Without·a·firewall | ||
| 113 | ····················································································rule·configured·for | ||
| 114 | ·········Ensure·firewall·····Any·ports·that·have·been·opened·on·non-loopback········open·ports·default | ||
| 115 | Req-1.4··rules·exist·for·all·addresses·need·firewall·rules·to·govern·traffic.·······firewall·policy | ||
| 116 | ·········open·ports·································································will·drop·all | ||
| 117 | ····················································································packets·to·these | ||
| 118 | ····················································································ports. | ||
| 119 | ····················································································Loopback·traffic·is | 119 | ····················································································Loopback·traffic·is |
| 120 | ····················································································generated·between | 120 | ····················································································generated·between |
| 121 | ····················································································processes·on | 121 | ····················································································processes·on |
| 122 | ····················································································machine·and·is | 122 | ····················································································machine·and·is |
| 123 | ····················································································typically·critical | 123 | ····················································································typically·critical |
| 124 | ····················································································to·operation·of·the | 124 | ····················································································to·operation·of·the |
| 125 | ····················································································system.·The | 125 | ····················································································system.·The |
| Offset 187, 14 lines modified | Offset 187, 39 lines modified | ||
| 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against | 187 | Req-·····Disable·DCCP········being·loaded,·add·the·following·line·to·the·file·/etc/·against |
| 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any | 188 | 1.4.2····Support·············modprobe.d/dccp.conf:··································exploitation·of·any |
| 189 | ·····························install·dccp·/bin/false································flaws·in·its | 189 | ·····························install·dccp·/bin/false································flaws·in·its |
| 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. | 190 | ·····························To·configure·the·system·to·prevent·the·dccp·from·being·implementation. |
| 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ | 191 | ·····························used,·add·the·following·line·to·file·/etc/modprobe.d/ |
| 192 | ·····························dccp.conf: | 192 | ·····························dccp.conf: |
| 193 | ·····························blacklist·dccp | 193 | ·····························blacklist·dccp |
| 194 | ·····························To·set·the·runtime·status·of·the | ||
| 195 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 196 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 197 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 198 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 199 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 200 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········be·logged. | ||
| 201 | ·····························sysctl.d: | ||
| 202 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·=·1 | ||
| 203 | ····················································································Responding·to | ||
| 204 | ····················································································broadcast·(ICMP) | ||
| 205 | ····················································································echoes·facilitates | ||
| 206 | ·····························To·set·the·runtime·status·of·the·······················network·mapping·and | ||
| 207 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·kernel·parameter,·provides·a·vector | ||
| 208 | ·········Enable·Kernel·······run·the·following·command:·····························for·amplification | ||
| 209 | ·········Parameter·to·Ignore·$·sudo·sysctl·-········································attacks. | ||
| 210 | Req-·····ICMP·Broadcast·Echo·w·net.ipv4.icmp_echo_ignore_broadcasts=1···············Ignoring·ICMP·echo | ||
| 211 | 1.4.3····Requests·on·IPv4····To·make·sure·that·the·setting·is·persistent,·add·the···requests·(pings) | ||
| 212 | ·········Interfaces··········following·line·to·a·file·in·the·directory·/etc/········sent·to·broadcast | ||
| 213 | ·····························sysctl.d:··············································or·multicast | ||
| 214 | ·····························net.ipv4.icmp_echo_ignore_broadcasts·=·1···············addresses·makes·the | ||
| 215 | ····················································································system·slightly | ||
| 216 | ····················································································more·difficult·to | ||
| 217 | ····················································································enumerate·on·the | ||
| 218 | ····················································································network. | ||
| 194 | ····················································································Source-routed | 219 | ····················································································Source-routed |
| 195 | ····················································································packets·allow·the | 220 | ····················································································packets·allow·the |
| 196 | ····················································································source·of·the | 221 | ····················································································source·of·the |
| 197 | ····················································································packet·to·suggest | 222 | ····················································································packet·to·suggest |
| 198 | ····················································································routers·forward·the | 223 | ····················································································routers·forward·the |
| 199 | ····················································································packet·along·a | 224 | ····················································································packet·along·a |
| 200 | ····················································································different·path·than | 225 | ····················································································different·path·than |
| Offset 228, 23 lines modified | Offset 253, 32 lines modified | ||
| 228 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as | 253 | ·········Parameter·for·······run·the·following·command:·····························gateways·listed·as |
| 229 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) | 254 | Req-·····Accepting·Secure····$·sudo·sysctl·-w·net.ipv4.conf.all.secure_redirects=0··default·gateways) |
| 230 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate | 255 | 1.4.3····ICMP·Redirects·on···To·make·sure·that·the·setting·is·persistent,·add·the···has·few·legitimate |
| 231 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be | 256 | ·········all·IPv4·Interfaces·following·line·to·a·file·in·the·directory·/etc/········uses.·It·should·be |
| 232 | ·····························sysctl.d:··············································disabled·unless·it | 257 | ·····························sysctl.d:··············································disabled·unless·it |
| 233 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely | 258 | ·····························net.ipv4.conf.all.secure_redirects·=·0·················is·absolutely |
| 234 | ····················································································required. | 259 | ····················································································required. |
| 260 | ····················································································Enabling·reverse | ||
| 261 | ····················································································path·filtering | ||
| 262 | ····················································································drops·packets·with | ||
| 263 | ····················································································source·addresses | ||
| 264 | ····················································································that·should·not | ||
| 235 | ·····························To·set·the·runtime·status·of·the | 265 | ·····························To·set·the·runtime·status·of·the·······················have·been·able·to |
| 266 | ·········Enable·Kernel·······net.ipv4.conf.all.rp_filter·kernel·parameter,·run·the··be·received·on·the | ||
| 267 | ·········Parameter·to·Use····following·command:·····································interface·they·were | ||
| 268 | Req-·····Reverse·Path········$·sudo·sysctl·-w·net.ipv4.conf.all.rp_filter=1·········received·on.·It | ||
| 269 | 1.4.3····Filtering·on·all····To·make·sure·that·the·setting·is·persistent,·add·the···should·not·be·used | ||
| 236 | ·····························net.ipv4.icmp_ignore_bogus_error_responses·kernel······Ignoring·bogus·ICMP | ||
| 237 | ·········Enable·Kernel·······parameter,·run·the·following·command:··················error·responses | ||
| 238 | Req-·····Parameter·to·Ignore·$·sudo·sysctl·-········································reduces·log·size, | ||
| 239 | 1.4.3····Bogus·ICMP·Error····w·net.ipv4.icmp_ignore_bogus_error_responses=1·········although·some | ||
| 240 | ·········Responses·on·IPv4···To·make·sure·that·the·setting·is·persistent,·add·the···activity·would·not | ||
| 241 | ·········Interfaces | 270 | ·········IPv4·Interfaces·····following·line·to·a·file·in·the·directory·/etc/········on·systems·which |
| 242 | ·····························sysctl.d: | ||
| 243 | ····························· | 271 | ·····························sysctl.d:··············································are·routers·for |
| 272 | ·····························net.ipv4.conf.all.rp_filter·=·1························complicated | ||
| 273 | ····················································································networks,·but·is | ||
| 274 | ····················································································helpful·for·end | ||
| 275 | ····················································································hosts·and·routers | ||
| 276 | ····················································································serving·small | ||
| 277 | ····················································································networks. | ||
| 244 | ····················································································ICMP·redirect | 278 | ····················································································ICMP·redirect |
| 245 | ····················································································messages·are·used | 279 | ····················································································messages·are·used |
| 246 | ····················································································by·routers·to | 280 | ····················································································by·routers·to |
| 247 | ····················································································inform·hosts·that·a | 281 | ····················································································inform·hosts·that·a |
| 248 | ····················································································more·direct·route | 282 | ····················································································more·direct·route |
| 249 | ····················································································exists·for·a | 283 | ····················································································exists·for·a |
| 250 | ····················································································particular | 284 | ····················································································particular |
| Offset 261, 48 lines modified | Offset 295, 14 lines modified | ||
| 261 | ····················································································This·feature·of·the | 295 | ····················································································This·feature·of·the |
| 262 | ····················································································IPv4·protocol·has | 296 | ····················································································IPv4·protocol·has |
| 263 | ····················································································few·legitimate | 297 | ····················································································few·legitimate |
| 264 | ····················································································uses.·It·should·be | 298 | ····················································································uses.·It·should·be |
| Max diff block lines reached; 496812/509433 bytes (97.52%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> | 2 | <xccdf-1.2:Tailoring·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·id="xccdf_content-disa-delta_tailoring_default"> |
| 3 | ··<xccdf-1.2:version·time="202 | 3 | ··<xccdf-1.2:version·time="2025-01-23T07:11:47.189050+00:00">1</xccdf-1.2:version> |
| 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> | 4 | ··<xccdf-1.2:Profile·id="xccdf_org.ssgproject.content_profile_stig_delta_tailoring"·extends="xccdf_org.ssgproject.content_profile_stig"> |
| 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> | 5 | ····<xccdf-1.2:title·override="true">DISA·STIG·for·Red·Hat·Enterprise·Linux·8</xccdf-1.2:title> |
| 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the | 6 | ····<xccdf-1.2:description·override="true">This·profile·contains·configuration·checks·that·align·to·the |
| 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. | 7 | DISA·STIG·for·Red·Hat·Enterprise·Linux·8·V1R14. |
| 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this | 8 | In·addition·to·being·applicable·to·Red·Hat·Enterprise·Linux·8,·DISA·recognizes·this |
| 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of | 9 | configuration·baseline·as·applicable·to·the·operating·system·tier·of |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_AL-2023"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Amazon·Linux·2023</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of | 7 | configuration·settings·for·Amazon·Linux·2023.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 165 lines modified | Offset 72, 165 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | ||
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_pam"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 93 | ········</cpe-lang:logical-test> | ||
| 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 95 | ········ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 96 | ········</cpe-lang:logical-test> | ||
| 97 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="machine_and_mount_var"> | 90 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 103 | ······</cpe-lang:logical-test> | ||
| 104 | ····</cpe-lang:platform> | ||
| 105 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 108 | ······</cpe-lang:logical-test> | 94 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 95 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 96 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 97 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 99 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 113 | ······</cpe-lang:logical-test> | 100 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 101 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="grub2"> | 102 | ····<cpe-lang:platform·id="grub2"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 103 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 105 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 106 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id=" | 107 | ····<cpe-lang:platform·id="machine"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 108 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="package_p | 112 | ····<cpe-lang:platform·id="package_pam"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_p | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 128 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="n | 117 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | 122 | ······</cpe-lang:logical-test> |
| 134 | ····</cpe-lang:platform> | 123 | ····</cpe-lang:platform> |
| 135 | ····<cpe-lang:platform·id=" | 124 | ····<cpe-lang:platform·id="package_bash"> |
| 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 138 | ······</cpe-lang:logical-test> | 127 | ······</cpe-lang:logical-test> |
| 139 | ····</cpe-lang:platform> | 128 | ····</cpe-lang:platform> |
| 140 | ····<cpe-lang:platform·id=" | 129 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 132 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 133 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> | 134 | ····<cpe-lang:platform·id="machine_and_service_disabled_iptables_and_service_disabled_ufw"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_iptables:def:1"/> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="machine_and_mount_var-tmp"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-tmp:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 145 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 146 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 147 | ····<cpe-lang:platform·id="package_dnf"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> | ||
| 161 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 152 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 168 | ······</cpe-lang:logical-test> | 155 | ······</cpe-lang:logical-test> |
| 169 | ····</cpe-lang:platform> | 156 | ····</cpe-lang:platform> |
| 170 | ····<cpe-lang:platform·id=" | 157 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 160 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 161 | ········</cpe-lang:logical-test> | ||
| 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg- | 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-al2023-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 173 | ········<cpe-lang | 164 | ········</cpe-lang:logical-test> |
| 174 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="package_chrony"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 81976/96211 bytes (85.20%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-2"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·2</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·2.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 198 lines modified | Offset 71, 198 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 92 | ········</cpe-lang:logical-test> | ||
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 94 | ········ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | ||
| 96 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 101 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 102 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 104 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 116 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 117 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 118 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-p | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 121 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 122 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 123 | ····<cpe-lang:platform·id="package_ntp"> | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 111 | ········</cpe-lang:logical-test> | ||
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 126 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 127 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 128 | ····<cpe-lang:platform·id="machine_and_package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 129 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="grub2"> | 121 | ····<cpe-lang:platform·id="grub2"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 144 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="machine"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="ipv6_enabled"> | 141 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 159 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="package_f | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | ||
| 164 | ······</cpe-lang:logical-test> | 154 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 155 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="package_logrotate"> | 156 | ····<cpe-lang:platform·id="package_logrotate"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id="package_ | 161 | ····<cpe-lang:platform·id="package_ntp"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ | 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux2-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 164 | ······</cpe-lang:logical-test> |
| Max diff block lines reached; 119995/132404 bytes (90.63%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ALINUX-3"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Alibaba·Cloud·Linux·3</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of | 7 | configuration·settings·for·Alibaba·Cloud·Linux·3.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 186 lines modified | Offset 71, 186 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id="not_aa | 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 97 | ········</cpe-lang:logical-test> | 98 | ········</cpe-lang:logical-test> |
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 100 | ········</cpe-lang:logical-test> | 101 | ········</cpe-lang:logical-test> |
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 106 | ······</cpe-lang:logical-test> | ||
| 107 | ····</cpe-lang:platform> | ||
| 108 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="machine_and_package_ | 105 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="grub2"> | 111 | ····<cpe-lang:platform·id="grub2"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 116 | ····<cpe-lang:platform·id="package_iptables"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="package_postfix"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_postfix:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="machine"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_pam"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id="package_firewalld"> | 131 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> |
| 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 154 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 159 | ······</cpe-lang:logical-test> | ||
| 160 | ····</cpe-lang:platform> | ||
| 161 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg- | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> | 143 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 145 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 169 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 146 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 170 | ········</cpe-lang:logical-test> | 147 | ········</cpe-lang:logical-test> |
| 171 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 172 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 173 | ········</cpe-lang:logical-test> | 150 | ········</cpe-lang:logical-test> |
| 174 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id=" | 153 | ····<cpe-lang:platform·id="package_logrotate"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | ||
| 157 | ····</cpe-lang:platform> | ||
| 158 | ····<cpe-lang:platform·id="package_bind"> | ||
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-alinux3-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> | ||
| Max diff block lines reached; 113314/125847 bytes (90.04%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-23"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·23</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·23.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 218 lines modified | Offset 71, 218 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="machine_and_package_squid"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-p | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_ba | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 111 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_b | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="machine_and_package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="grub2"> | 121 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="machine"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_bash"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="ipv6_enabled"> | 146 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis23-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_f | 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| Max diff block lines reached; 132993/145715 bytes (91.27%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_ANOLIS-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Anolis·OS·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Anolis·OS·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 218 lines modified | Offset 71, 218 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_ | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="machine_and_package_squid"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 83 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 85 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 86 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | 87 | ········</cpe-lang:logical-test> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 88 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 89 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="package_ | 93 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 99 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-p | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_ba | 104 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 107 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 108 | ········</cpe-lang:logical-test> | ||
| 109 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 110 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 111 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_b | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="machine_and_package_ | 115 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="grub2"> | 121 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 131 | ····<cpe-lang:platform·id="machine"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | ||
| 140 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="package_bash"> | ||
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="ipv6_enabled"> | 146 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-anolis8-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="package_f | 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| Max diff block lines reached; 132835/145516 bytes (91.29%) of diff not shown. | |||
| Offset 19, 25 lines modified | Offset 19, 25 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-macos1015-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:apple:macos:10.15"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">Apple·macOS·10.15</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-macos1015-cpe-oval.xml">oval:ssg-installed_OS_is_macos1015:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ····</cpe-dict:cpe-list> | 32 | ····</cpe-dict:cpe-list> |
| 33 | ··</ds:component> | 33 | ··</ds:component> |
| 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-0 | 34 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 35 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 36 | ······<xccdf-1.2:status·date="202 | 36 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 37 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 38 | ······<xccdf-1.2:description> | 38 | ······<xccdf-1.2:description> |
| 39 | ········This·guide·presents·a·catalog·of·security-relevant | 39 | ········This·guide·presents·a·catalog·of·security-relevant |
| 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 40 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 41 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 42 | in·order·to·support·security·automation. | 42 | in·order·to·support·security·automation. |
| 43 | ········<html:br/> | 43 | ········<html:br/> |
| Offset 554, 15 lines modified | Offset 554, 15 lines modified | ||
| 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> | 554 | ··············<xccdf-1.2:check-content-ref·href="ssg-macos1015-ocil.xml"·name="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"/> |
| 555 | ············</xccdf-1.2:check> | 555 | ············</xccdf-1.2:check> |
| 556 | ··········</xccdf-1.2:Rule> | 556 | ··········</xccdf-1.2:Rule> |
| 557 | ········</xccdf-1.2:Group> | 557 | ········</xccdf-1.2:Group> |
| 558 | ······</xccdf-1.2:Group> | 558 | ······</xccdf-1.2:Group> |
| 559 | ····</xccdf-1.2:Benchmark> | 559 | ····</xccdf-1.2:Benchmark> |
| 560 | ··</ds:component> | 560 | ··</ds:component> |
| 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-0 | 561 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 562 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 563 | ······<oval-def:generator> | 563 | ······<oval-def:generator> |
| 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> | 564 | ········<oval:product_name>OVALFileLinker·from·SCAP·Security·Guide</oval:product_name> |
| 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 565 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 566 | ········<oval:schema_version>5.11</oval:schema_version> | 566 | ········<oval:schema_version>5.11</oval:schema_version> |
| 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> | 567 | ········<oval:timestamp>2024-11-02T18:39:34</oval:timestamp> |
| 568 | ······</oval-def:generator> | 568 | ······</oval-def:generator> |
| Offset 591, 74 lines modified | Offset 591, 74 lines modified | ||
| 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> | 591 | ··········<ind:filepath>/etc/security/audit_control</ind:filepath> |
| 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> | 592 | ··········<ind:pattern·operation="pattern·match">^policy:.*,ahlt.*$</ind:pattern> |
| 593 | ··········<ind:instance·datatype="int">1</ind:instance> | 593 | ··········<ind:instance·datatype="int">1</ind:instance> |
| 594 | ········</ind:textfilecontent54_object> | 594 | ········</ind:textfilecontent54_object> |
| 595 | ······</oval-def:objects> | 595 | ······</oval-def:objects> |
| 596 | ····</oval-def:oval_definitions> | 596 | ····</oval-def:oval_definitions> |
| 597 | ··</ds:component> | 597 | ··</ds:component> |
| 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-0 | 598 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-ocil.xml"·timestamp="2024-11-03T08:39:34"> |
| 599 | ····<ocil:ocil> | 599 | ····<ocil:ocil> |
| 600 | ······<ocil:generator> | 600 | ······<ocil:generator> |
| 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 601 | ········<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 602 | ········<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 603 | ········<ocil:schema_version>2.0</ocil:schema_version> | 603 | ········<ocil:schema_version>2.0</ocil:schema_version> |
| 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 604 | ········<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 605 | ······</ocil:generator> | 605 | ······</ocil:generator> |
| 606 | ······<ocil:questionnaires> | 606 | ······<ocil:questionnaires> |
| 607 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 608 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 609 | ··········<ocil:actions> | ||
| 610 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 611 | ··········</ocil:actions> | ||
| 612 | ········</ocil:questionnaire> | ||
| 613 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 607 | ········<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 614 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 608 | ··········<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 615 | ··········<ocil:actions> | 609 | ··········<ocil:actions> |
| 616 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 610 | ············<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 617 | ··········</ocil:actions> | 611 | ··········</ocil:actions> |
| 618 | ········</ocil:questionnaire> | 612 | ········</ocil:questionnaire> |
| 613 | ········<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 614 | ··········<ocil:title>Enable·audit·Service</ocil:title> | ||
| 615 | ··········<ocil:actions> | ||
| 616 | ············<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 617 | ··········</ocil:actions> | ||
| 618 | ········</ocil:questionnaire> | ||
| 619 | ······</ocil:questionnaires> | 619 | ······</ocil:questionnaires> |
| 620 | ······<ocil:test_actions> | 620 | ······<ocil:test_actions> |
| 621 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 621 | ········<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 622 | ··········<ocil:when_true> | 622 | ··········<ocil:when_true> |
| 623 | ············<ocil:result>PASS</ocil:result> | 623 | ············<ocil:result>PASS</ocil:result> |
| 624 | ··········</ocil:when_true> | 624 | ··········</ocil:when_true> |
| 625 | ··········<ocil:when_false> | 625 | ··········<ocil:when_false> |
| 626 | ············<ocil:result>FAIL</ocil:result> | 626 | ············<ocil:result>FAIL</ocil:result> |
| 627 | ··········</ocil:when_false> | 627 | ··········</ocil:when_false> |
| 628 | ········</ocil:boolean_question_test_action> | 628 | ········</ocil:boolean_question_test_action> |
| 629 | ········<ocil:boolean_question_test_action·id="ocil:ssg- | 629 | ········<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 630 | ··········<ocil:when_true> | 630 | ··········<ocil:when_true> |
| 631 | ············<ocil:result>PASS</ocil:result> | 631 | ············<ocil:result>PASS</ocil:result> |
| 632 | ··········</ocil:when_true> | 632 | ··········</ocil:when_true> |
| 633 | ··········<ocil:when_false> | 633 | ··········<ocil:when_false> |
| 634 | ············<ocil:result>FAIL</ocil:result> | 634 | ············<ocil:result>FAIL</ocil:result> |
| 635 | ··········</ocil:when_false> | 635 | ··········</ocil:when_false> |
| 636 | ········</ocil:boolean_question_test_action> | 636 | ········</ocil:boolean_question_test_action> |
| 637 | ······</ocil:test_actions> | 637 | ······</ocil:test_actions> |
| 638 | ······<ocil:questions> | 638 | ······<ocil:questions> |
| 639 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 640 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 641 | following·command: | ||
| 642 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 643 | The·output·should·contain·ahlt | ||
| 644 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 645 | ········</ocil:boolean_question> | ||
| 639 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 646 | ········<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 640 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 647 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 641 | following·command: | 648 | following·command: |
| 642 | $·sudo·launchctl·list·com.apple.auditd | 649 | $·sudo·launchctl·list·com.apple.auditd |
| 643 | The·output·should·return·process·information·for | 650 | The·output·should·return·process·information·for |
| 644 | com.apple.auditd | 651 | com.apple.auditd |
| 645 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 652 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 646 | ········</ocil:boolean_question> | 653 | ········</ocil:boolean_question> |
| 647 | ········<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 648 | ··········<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 649 | following·command: | ||
| 650 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 651 | The·output·should·contain·ahlt | ||
| 652 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 653 | ········</ocil:boolean_question> | ||
| 654 | ······</ocil:questions> | 654 | ······</ocil:questions> |
| 655 | ····</ocil:ocil> | 655 | ····</ocil:ocil> |
| 656 | ··</ds:component> | 656 | ··</ds:component> |
| 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-0 | 657 | ··<ds:component·id="scap_org.open-scap_comp_ssg-macos1015-cpe-oval.xml"·timestamp="2024-11-03T08:39:34"> |
| 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> | 658 | ····<oval-def:oval_definitions·xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-common-5·oval-common-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5·oval-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#independent·independent-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#unix·unix-definitions-schema.xsd··http://oval.mitre.org/XMLSchema/oval-definitions-5#linux·linux-definitions-schema.xsd"> |
| 659 | ······<oval-def:generator> | 659 | ······<oval-def:generator> |
| 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> | 660 | ········<oval:product_name>build_cpe.py·from·SCAP·Security·Guide</oval:product_name> |
| 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> | 661 | ········<oval:product_version>ssg:·[0,·1,·74],·python:·3.12.8</oval:product_version> |
| 662 | ········<oval:schema_version>5.11</oval:schema_version> | 662 | ········<oval:schema_version>5.11</oval:schema_version> |
| Max diff block lines reached; 29/9276 bytes (0.31%) of diff not shown. | |||
| Offset 3, 56 lines modified | Offset 3, 56 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> | 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_failure_halt_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> | 11 | ······<ocil:title>Shutdown·System·When·Auditing·Failures·Occur</ocil:title> |
| 18 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> | 13 | ········<ocil:test_action_ref>ocil:ssg-audit_failure_halt_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-service_com_apple_auditd_enabled_ocil:questionnaire:1"> | ||
| 17 | ······<ocil:title>Enable·audit·Service</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ··</ocil:questionnaires> | 22 | ··</ocil:questionnaires> |
| 23 | ··<ocil:test_actions> | 23 | ··<ocil:test_actions> |
| 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 24 | ····<ocil:boolean_question_test_action·id="ocil:ssg-audit_failure_halt_action:testaction:1"·question_ref="ocil:ssg-audit_failure_halt_question:question:1"> |
| 25 | ······<ocil:when_true> | 25 | ······<ocil:when_true> |
| 26 | ········<ocil:result>PASS</ocil:result> | 26 | ········<ocil:result>PASS</ocil:result> |
| 27 | ······</ocil:when_true> | 27 | ······</ocil:when_true> |
| 28 | ······<ocil:when_false> | 28 | ······<ocil:when_false> |
| 29 | ········<ocil:result>FAIL</ocil:result> | 29 | ········<ocil:result>FAIL</ocil:result> |
| 30 | ······</ocil:when_false> | 30 | ······</ocil:when_false> |
| 31 | ····</ocil:boolean_question_test_action> | 31 | ····</ocil:boolean_question_test_action> |
| 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg- | 32 | ····<ocil:boolean_question_test_action·id="ocil:ssg-service_com_apple_auditd_enabled_action:testaction:1"·question_ref="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 33 | ······<ocil:when_true> | 33 | ······<ocil:when_true> |
| 34 | ········<ocil:result>PASS</ocil:result> | 34 | ········<ocil:result>PASS</ocil:result> |
| 35 | ······</ocil:when_true> | 35 | ······</ocil:when_true> |
| 36 | ······<ocil:when_false> | 36 | ······<ocil:when_false> |
| 37 | ········<ocil:result>FAIL</ocil:result> | 37 | ········<ocil:result>FAIL</ocil:result> |
| 38 | ······</ocil:when_false> | 38 | ······</ocil:when_false> |
| 39 | ····</ocil:boolean_question_test_action> | 39 | ····</ocil:boolean_question_test_action> |
| 40 | ··</ocil:test_actions> | 40 | ··</ocil:test_actions> |
| 41 | ··<ocil:questions> | 41 | ··<ocil:questions> |
| 42 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 44 | following·command: | ||
| 45 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 46 | The·output·should·contain·ahlt | ||
| 47 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 48 | ····</ocil:boolean_question> | ||
| 42 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> | 49 | ····<ocil:boolean_question·id="ocil:ssg-service_com_apple_auditd_enabled_question:question:1"> |
| 43 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | 50 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the |
| 44 | following·command: | 51 | following·command: |
| 45 | $·sudo·launchctl·list·com.apple.auditd | 52 | $·sudo·launchctl·list·com.apple.auditd |
| 46 | The·output·should·return·process·information·for | 53 | The·output·should·return·process·information·for |
| 47 | com.apple.auditd | 54 | com.apple.auditd |
| 48 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> | 55 | ······Is·it·the·case·that·auditing·is·not·enabled·or·running?</ocil:question_text> |
| 49 | ····</ocil:boolean_question> | 56 | ····</ocil:boolean_question> |
| 50 | ····<ocil:boolean_question·id="ocil:ssg-audit_failure_halt_question:question:1"> | ||
| 51 | ······<ocil:question_text>To·verify·that·auditing·is·enabled·and·running,·run·the | ||
| 52 | following·command: | ||
| 53 | $·sudo·grep·-E·"^policy.*ahlt"·/etc/security/audit_control | ||
| 54 | The·output·should·contain·ahlt | ||
| 55 | ······Is·it·the·case·that·auditing·is·not·configured·to·shut·down·on·audit·failure?</ocil:question_text> | ||
| 56 | ····</ocil:boolean_question> | ||
| 57 | ··</ocil:questions> | 57 | ··</ocil:questions> |
| 58 | </ocil:ocil> | 58 | </ocil:ocil> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_macOS-1015"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Apple·macOS·10.15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of | 7 | configuration·settings·for·Apple·macOS·10.15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation. | 9 | in·order·to·support·security·automation. |
| 10 | ····<html:br/> | 10 | ····<html:br/> |
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OCP-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·OpenShift·Container·Platform·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·OpenShift·Container·Platform·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 114 lines modified | Offset 72, 101 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="ocp4-node"> | 79 | ····<cpe-lang:platform·id="not_s390x_arch_and_ocp4-node"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 83 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 84 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 85 | ····<cpe-lang:platform·id="ocp4-on-gcp"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 86 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_gcp:def:1"/> |
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 91 | ········</cpe-lang:logical-test> | ||
| 92 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id="ocp4 | 90 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="ocp4 | 95 | ····<cpe-lang:platform·id="ocp4-on-sdn"> |
| 100 | ······<cpe-lang:logical-test·operator=" | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_openshiftsdn:def:1"/> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 103 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 104 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4. | 100 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6"> |
| 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | 103 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | 104 | ········</cpe-lang:logical-test> |
| 110 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 119 | ······</cpe-lang:logical-test> | ||
| 120 | ····</cpe-lang:platform> | ||
| 121 | ····<cpe-lang:platform·id="ocp4.11_or_ocp4.12_or_ocp4.13_or_ocp4.14_or_ocp4.15"> | ||
| 122 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_11:def:1"/> | ||
| 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_12:def:1"/> | ||
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_13:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_14:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_15:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="ocp4-on-azure"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_azure:def:1"/> | ||
| 133 | ······</cpe-lang:logical-test> | ||
| 134 | ····</cpe-lang:platform> | ||
| 135 | ····<cpe-lang:platform·id="ocp4.10_or_ocp4.8_or_ocp4.9"> | ||
| 136 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_10:def:1"/> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | ||
| 141 | ····</cpe-lang:platform> | ||
| 142 | ····<cpe-lang:platform·id="ocp4-node-on-sdn"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node_on_openshift-sdn:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | 106 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 107 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> | 108 | ····<cpe-lang:platform·id="ocp4.6_or_ocp4.7_or_ocp4.8"> |
| 148 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 109 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 152 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 153 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.6_or_ocp4.7_or_ocp4.8"> | ||
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> | ||
| 119 | ········</cpe-lang:logical-test> | ||
| 120 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 121 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_6:def:1"/> | ||
| 122 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_7:def:1"/> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ······</cpe-lang:logical-test> | ||
| 126 | ····</cpe-lang:platform> | ||
| 154 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> | 127 | ····<cpe-lang:platform·id="ocp4-node_and_s390x_arch"> |
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_node:def:1"/> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id="not_ | 133 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.8_or_ocp4.9"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| 137 | ········</cpe-lang:logical-test> | ||
| 138 | ········<cpe-lang:logical-test·operator="OR"·negate="false"> | ||
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_ | 139 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_8:def:1"/> |
| 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_9:def:1"/> | ||
| 141 | ········</cpe-lang:logical-test> | ||
| 164 | ······</cpe-lang:logical-test> | 142 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 143 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift"> | 144 | ····<cpe-lang:platform·id="not_ocp4-on-hypershift-hosted_and_ocp4.10_or_ocp4.6_or_ocp4.7_or_ocp4.8_or_ocp4.9"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift:def:1"/> | 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ocp4-cpe-oval.xml"·id-ref="oval:ssg-installed_app_is_ocp4_on_hypershift_hosted:def:1"/> |
| Max diff block lines reached; 13551/27971 bytes (48.45%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-7"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·7</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·7.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 414 lines modified | Offset 72, 414 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 87 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> | ||
| 113 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 114 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 115 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 106 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 117 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 118 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 119 | ········</cpe-lang:logical-test> | 110 | ········</cpe-lang:logical-test> |
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 123 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 124 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 125 | ····<cpe-lang:platform·id="machine_and_package_ | 116 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_ | 127 | ····<cpe-lang:platform·id="package_libreswan"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 136 | ········</cpe-lang:logical-test> | ||
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 139 | ········</cpe-lang:logical-test> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 141 | ······</cpe-lang:logical-test> | ||
| 142 | ····</cpe-lang:platform> | ||
| 141 | ····<cpe-lang:platform·id="machine_and_ | 143 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 145 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 146 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 147 | ····<cpe-lang:platform·id="machine_and_mount_o | 149 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_o | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | ||
| 154 | ····</cpe-lang:platform> | ||
| 155 | ····<cpe-lang:platform·id="grub2"> | ||
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id="package_iptables"> | 160 | ····<cpe-lang:platform·id="package_iptables"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 161 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 162 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 163 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="machine"> |
| 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg- | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol7-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_pam"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| Max diff block lines reached; 570084/584152 bytes (97.59%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-8"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·8</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·8.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 461 lines modified | Offset 72, 461 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 106 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 108 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 109 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 110 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 120 | ····<cpe-lang:platform·id="machine_and_package_ | 116 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id=" | 122 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 127 | ······<cpe-lang:logical-test·operator=" | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 128 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 129 | ········ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 130 | ········</cpe-lang:logical-test> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_le_8_4:def:1"/> | ||
| 132 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="package_libreswan"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-p | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="package_t | 132 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 135 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 136 | ········</cpe-lang:logical-test> | ||
| 137 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 138 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 139 | ········</cpe-lang:logical-test> | ||
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 142 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id="package_ | 143 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_ | 146 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 147 | ······</cpe-lang:logical-test> | 147 | ······</cpe-lang:logical-test> |
| 148 | ····</cpe-lang:platform> | 148 | ····</cpe-lang:platform> |
| 149 | ····<cpe-lang:platform·id="machine_and_mount_ | 149 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 150 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_ | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 155 | ····<cpe-lang:platform·id="grub2"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_opt:def:1"/> | ||
| 159 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 160 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 161 | ····<cpe-lang:platform·id="package_iptables"> | 160 | ····<cpe-lang:platform·id="package_iptables"> |
| 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 164 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 165 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 166 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 167 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 168 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 169 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 170 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 171 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="machine"> |
| 172 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg- | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 174 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 175 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| 176 | ····<cpe-lang:platform·id=" | 175 | ····<cpe-lang:platform·id="package_pam"> |
| 177 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 176 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 178 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 179 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol8-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| Max diff block lines reached; 634402/648985 bytes (97.75%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OL-9"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Oracle·Linux·9</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of | 7 | configuration·settings·for·Oracle·Linux·9.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 410 lines modified | Offset 72, 410 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 95 | ····<cpe-lang:platform·id="package_yum"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········ | 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id="machine_and_ | 100 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_package_ | 106 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | 110 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 111 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id=" | 112 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 113 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ | 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 119 | ······</cpe-lang:logical-test> | 115 | ······</cpe-lang:logical-test> |
| 120 | ····</cpe-lang:platform> | 116 | ····</cpe-lang:platform> |
| 121 | ····<cpe-lang:platform·id="package_ | 117 | ····<cpe-lang:platform·id="package_libreswan"> |
| 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 118 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 119 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 120 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 121 | ····</cpe-lang:platform> |
| 126 | ····<cpe-lang:platform·id="package_gd | 122 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 123 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 124 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 125 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 126 | ········</cpe-lang:logical-test> | ||
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 131 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 132 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="machine_and_ | 133 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 135 | ······</cpe-lang:logical-test> | 137 | ······</cpe-lang:logical-test> |
| 136 | ····</cpe-lang:platform> | 138 | ····</cpe-lang:platform> |
| 137 | ····<cpe-lang:platform·id="machine_and_mount_o | 139 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_o | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 143 | ····<cpe-lang:platform·id=" | 145 | ····<cpe-lang:platform·id="grub2"> |
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 146 | ······</cpe-lang:logical-test> | 148 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 149 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="package_ | 150 | ····<cpe-lang:platform·id="package_iptables"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 151 | ······</cpe-lang:logical-test> | 153 | ······</cpe-lang:logical-test> |
| 152 | ····</cpe-lang:platform> | 154 | ····</cpe-lang:platform> |
| 153 | ····<cpe-lang:platform·id=" | 155 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 156 | ······</cpe-lang:logical-test> | 158 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 159 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 160 | ····<cpe-lang:platform·id="machine"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 162 | ········</cpe-lang:logical-test> | ||
| 163 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_ppc64le:def:1"/> | ||
| 165 | ········</cpe-lang:logical-test> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id="package_ | 165 | ····<cpe-lang:platform·id="package_pam"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="machine_and_package_firewalld_and_package_nftables"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 173 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_firewalld:def:1"/> | ||
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg- | 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-ol9-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 175 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 176 | ····</cpe-lang:platform> |
| Max diff block lines reached; 514934/529065 bytes (97.33%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEMBEDDED"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·OpenEmbedded</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of | 7 | configuration·settings·for·OpenEmbedded.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 202 lines modified | Offset 71, 202 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_pam"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id="wifi-iface"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> | ||
| 91 | ······</cpe-lang:logical-test> | ||
| 92 | ····</cpe-lang:platform> | ||
| 93 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> | ||
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | ||
| 102 | ····</cpe-lang:platform> | ||
| 103 | ····<cpe-lang:platform·id="machine_and_package_squid"> | ||
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_squid:def:1"/> | ||
| 107 | ······</cpe-lang:logical-test> | ||
| 108 | ····</cpe-lang:platform> | ||
| 109 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 78 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 80 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 81 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | 82 | ········</cpe-lang:logical-test> |
| 114 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 83 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 84 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="package_ | 88 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ······</cpe-lang:logical-test> | 92 | ······</cpe-lang:logical-test> |
| 128 | ····</cpe-lang:platform> | 93 | ····</cpe-lang:platform> |
| 129 | ····<cpe-lang:platform·id=" | 94 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-p | 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 97 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 98 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id="package_ba | 99 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 102 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 103 | ········</cpe-lang:logical-test> | ||
| 104 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 105 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 106 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_b | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="machine_and_package_ | 110 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_ | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 143 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 144 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 145 | ····<cpe-lang:platform·id="grub2"> | 116 | ····<cpe-lang:platform·id="grub2"> |
| 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 148 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 149 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 150 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="package_iptables"> |
| 151 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 155 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id=" | 126 | ····<cpe-lang:platform·id="machine"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="package_p | 131 | ····<cpe-lang:platform·id="package_pam"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_p | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="package_bash"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 170 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 171 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 172 | ····<cpe-lang:platform·id="ipv6_enabled"> | 141 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 173 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openembedded-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 175 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 176 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 177 | ····<cpe-lang:platform·id="package_f | 146 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 178 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| Max diff block lines reached; 117840/130717 bytes (90.15%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-openeuler2203-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-openeuler2203-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS:ga:server"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP1:ga:server"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP1</cpe-dict:title> |
| Offset 35, 17 lines modified | Offset 35, 17 lines modified | ||
| 35 | ······</cpe-dict:cpe-item> | 35 | ······</cpe-dict:cpe-item> |
| 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> | 36 | ······<cpe-dict:cpe-item·name="cpe:/o:openEuler:openEuler:22.03LTS_SP2:ga:server"> |
| 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> | 37 | ········<cpe-dict:title·xml:lang="en-us">openEuler·22.03·LTS·SP2</cpe-dict:title> |
| 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> | 38 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml">oval:ssg-installed_OS_is_openeuler2203:def:1</cpe-dict:check> |
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ····</cpe-dict:cpe-list> | 40 | ····</cpe-dict:cpe-list> |
| 41 | ··</ds:component> | 41 | ··</ds:component> |
| 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-0 | 42 | ··<ds:component·id="scap_org.open-scap_comp_ssg-openeuler2203-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 43 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 44 | ······<xccdf-1.2:status·date="202 | 44 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 45 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 46 | ······<xccdf-1.2:description> | 46 | ······<xccdf-1.2:description> |
| 47 | ········This·guide·presents·a·catalog·of·security-relevant | 47 | ········This·guide·presents·a·catalog·of·security-relevant |
| 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 48 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 49 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 50 | in·order·to·support·security·automation.··The·SCAP·content·is | 50 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 51 | is·available·in·the | 51 | is·available·in·the |
| Offset 118, 133 lines modified | Offset 118, 133 lines modified | ||
| 118 | ······<cpe-lang:platform-specification> | 118 | ······<cpe-lang:platform-specification> |
| 119 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | 119 | ········<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 120 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 121 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 122 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 123 | ··········</cpe-lang:logical-test> | 123 | ··········</cpe-lang:logical-test> |
| 124 | ········</cpe-lang:platform> | 124 | ········</cpe-lang:platform> |
| 125 | ········<cpe-lang:platform·id="not_aa | 125 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 126 | ··········<cpe-lang:logical-test·operator="AND"·negate="true"> | 127 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 128 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 129 | ············</cpe-lang:logical-test> | ||
| 130 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 131 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 132 | ············</cpe-lang:logical-test> | ||
| 133 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 128 | ··········</cpe-lang:logical-test> | 134 | ··········</cpe-lang:logical-test> |
| 129 | ········</cpe-lang:platform> | 135 | ········</cpe-lang:platform> |
| 130 | ········<cpe-lang:platform·id="package_ | 136 | ········<cpe-lang:platform·id="machine_and_package_avahi"> |
| 131 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 132 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 139 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 133 | ··········</cpe-lang:logical-test> | 140 | ··········</cpe-lang:logical-test> |
| 134 | ········</cpe-lang:platform> | 141 | ········</cpe-lang:platform> |
| 135 | ········<cpe-lang:platform·id=" | 142 | ········<cpe-lang:platform·id="grub2"> |
| 136 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 143 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 137 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_ | 144 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 138 | ··········</cpe-lang:logical-test> | 145 | ··········</cpe-lang:logical-test> |
| 139 | ········</cpe-lang:platform> | 146 | ········</cpe-lang:platform> |
| 140 | ········<cpe-lang:platform·id="package_iptables"> | 147 | ········<cpe-lang:platform·id="package_iptables"> |
| 141 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 148 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 142 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 149 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 143 | ··········</cpe-lang:logical-test> | 150 | ··········</cpe-lang:logical-test> |
| 144 | ········</cpe-lang:platform> | 151 | ········</cpe-lang:platform> |
| 145 | ········<cpe-lang:platform·id=" | 152 | ········<cpe-lang:platform·id="machine"> |
| 146 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 153 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 155 | ··········</cpe-lang:logical-test> | ||
| 156 | ········</cpe-lang:platform> | ||
| 157 | ········<cpe-lang:platform·id="package_pam"> | ||
| 158 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 147 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 159 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 148 | ··········</cpe-lang:logical-test> | 160 | ··········</cpe-lang:logical-test> |
| 149 | ········</cpe-lang:platform> | 161 | ········</cpe-lang:platform> |
| 150 | ········<cpe-lang:platform·id="package_bash"> | 162 | ········<cpe-lang:platform·id="package_bash"> |
| 151 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 163 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 152 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | 164 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 153 | ··········</cpe-lang:logical-test> | 165 | ··········</cpe-lang:logical-test> |
| 154 | ········</cpe-lang:platform> | 166 | ········</cpe-lang:platform> |
| 155 | ········<cpe-lang:platform·id="p | 167 | ········<cpe-lang:platform·id="ipv6_enabled"> |
| 156 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 157 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 158 | ··········</cpe-lang:logical-test> | 170 | ··········</cpe-lang:logical-test> |
| 159 | ········</cpe-lang:platform> | 171 | ········</cpe-lang:platform> |
| 160 | ········<cpe-lang:platform·id="g | 172 | ········<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 161 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 175 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 176 | ············</cpe-lang:logical-test> | ||
| 177 | ············<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 162 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 178 | ··············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 179 | ············</cpe-lang:logical-test> | ||
| 163 | ··········</cpe-lang:logical-test> | 180 | ··········</cpe-lang:logical-test> |
| 164 | ········</cpe-lang:platform> | 181 | ········</cpe-lang:platform> |
| 165 | ········<cpe-lang:platform·id=" | 182 | ········<cpe-lang:platform·id="uefi"> |
| 166 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 183 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 167 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 184 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 168 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 169 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 170 | ··········</cpe-lang:logical-test> | 185 | ··········</cpe-lang:logical-test> |
| 171 | ········</cpe-lang:platform> | 186 | ········</cpe-lang:platform> |
| 172 | ········<cpe-lang:platform·id="package_ | 187 | ········<cpe-lang:platform·id="package_ntp"> |
| 173 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 188 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 174 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 189 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 175 | ··········</cpe-lang:logical-test> | 190 | ··········</cpe-lang:logical-test> |
| 176 | ········</cpe-lang:platform> | 191 | ········</cpe-lang:platform> |
| 177 | ········<cpe-lang:platform·id="machine_and_package_ | 192 | ········<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 178 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 193 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 179 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 194 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 180 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 195 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 181 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 196 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 182 | ··········</cpe-lang:logical-test> | 197 | ··········</cpe-lang:logical-test> |
| 183 | ········</cpe-lang:platform> | 198 | ········</cpe-lang:platform> |
| 199 | ········<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> | ||
| 184 | ········<cpe-lang:platform·id="non-uefi"> | ||
| 185 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 186 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | ||
| 187 | ··········</cpe-lang:logical-test> | ||
| 188 | ········</cpe-lang:platform> | ||
| 189 | ········<cpe-lang:platform·id="ipv6_enabled"> | ||
| 190 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 191 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 192 | ··········</cpe-lang:logical-test> | ||
| Max diff block lines reached; 641109/654119 bytes (98.01%) of diff not shown. | |||
| Offset 3, 2405 lines modified | Offset 3, 2405 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_full_action_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Configure·auditd·Disk·Full·Action·when·Disk·Space·Is·Full</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_disk_full_action_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_pam_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Enable·PAM</ocil:title> | ||
| 17 | ······<ocil:title>A·remote·time·server·for·Chrony·is·configured</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-chronyd_specify_remote_server_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_disk_error_action_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Configure·auditd·Disk·Error·Action·on·Disk·Error</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-sshd_enable_pam_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg- | 16 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_settimeofday_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Record·attempts·to·alter·time·through·settimeofday</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 19 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_time_settimeofday_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_ocil:questionnaire:1"> | ||
| 35 | ···· | 22 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_issue_net_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Verify·permissions·on·System·Login·Banner·for·Remote·Connections</ocil:title> | ||
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_issue_net_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_module_tipc_disabled_ocil:questionnaire:1"> | ||
| 41 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·ICMP·Broadcast·Echo·Requests·on·IPv4·Interfaces</ocil:title> | ||
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_echo_ignore_broadcasts_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_accept_redirects_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_cron_hourly_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Group·Who·Owns·cron.hourly</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_cron_hourly_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-accounts_password_pam_enforce_root_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_successful_file_modification_removexattr_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Record·Successful·Permission·Changes·to·Files·-·removexattr</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg-a | 43 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_successful_file_modification_removexattr_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_issue_net_ocil:questionnaire:1"> | ||
| 59 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_tcp_syncookies_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Enable·Kernel·Parameter·to·Use·TCP·Syncookies·on·Network·Interfaces</ocil:title> | ||
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_tcp_syncookies_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_kernel_module_loading_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-file_permissions_etc_issue_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Verify·permissions·on·System·Login·Banner</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-file_permissions_etc_issue_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-auditd_data_retention_space_left_action_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 59 | ······<ocil:title>Configure·auditd·space_left·Action·on·Low·Disk·Space</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-auditd_data_retention_space_left_action_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-accounts_minimum_age_login_defs_ocil:questionnaire:1"> | ||
| 77 | ···· | 64 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_cron_monthly_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Verify·Owner·on·cron.monthly</ocil:title> | ||
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 67 | ········<ocil:test_action_ref>ocil:ssg-file_owner_cron_monthly_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_cron_logging_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Ensure·cron·Is·Logging·To·Rsyslog</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-rsyslog_cron_logging_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-ss | 76 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 77 | ······<ocil:title>Enable·Kernel·Parameter·to·Log·Martian·Packets·on·all·IPv4·Interfaces</ocil:title> |
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg-ss | 79 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_log_martians_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_sudoers_ocil:questionnaire:1"> | ||
| 95 | ···· | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_ocil:questionnaire:1"> |
| 83 | ······<ocil:title>Disable·Kernel·Parameter·for·Accepting·Source-Routed·Packets·on·IPv4·Interfaces·by·Default</ocil:title> | ||
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_default_accept_source_route_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_etc_motd_ocil:questionnaire:1"> | ||
| 101 | ···· | 88 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_icmp_ignore_bogus_error_responses_ocil:questionnaire:1"> |
| 89 | ······<ocil:title>Enable·Kernel·Parameter·to·Ignore·Bogus·ICMP·Error·Responses·on·IPv4·Interfaces</ocil:title> | ||
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_icmp_ignore_bogus_error_responses_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_etc_gshadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Verify·User·Who·Owns·gshadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_etc_gshadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-grub2_nosmap_argument_absent_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·SMAP·is·not·disabled·during·boot</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-grub2_nosmap_argument_absent_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 106 | ····<ocil:questionnaire·id="ocil:ssg-use_pam_wheel_for_su_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 107 | ······<ocil:title>Enforce·usage·of·pam_wheel·for·su·authentication</ocil:title> |
| Max diff block lines reached; 534731/546505 bytes (97.85%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENEULER2203"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openEuler·2203</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of | 7 | configuration·settings·for·openEuler·2203.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 77, 133 lines modified | Offset 77, 133 lines modified | ||
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | 78 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 82 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 83 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 84 | ····<cpe-lang:platform·id="not_aa | 84 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | 86 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 87 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 88 | ········</cpe-lang:logical-test> | ||
| 89 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 90 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 91 | ········</cpe-lang:logical-test> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 88 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 89 | ····<cpe-lang:platform·id="package_ | 95 | ····<cpe-lang:platform·id="machine_and_package_avahi"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 98 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_avahi:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 99 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 100 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 101 | ····<cpe-lang:platform·id="grub2"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 102 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_ | 103 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 97 | ······</cpe-lang:logical-test> | 104 | ······</cpe-lang:logical-test> |
| 98 | ····</cpe-lang:platform> | 105 | ····</cpe-lang:platform> |
| 99 | ····<cpe-lang:platform·id="package_iptables"> | 106 | ····<cpe-lang:platform·id="package_iptables"> |
| 100 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 107 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 102 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="machine"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 114 | ······</cpe-lang:logical-test> | ||
| 115 | ····</cpe-lang:platform> | ||
| 116 | ····<cpe-lang:platform·id="package_pam"> | ||
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 107 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 108 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 109 | ····<cpe-lang:platform·id="package_bash"> | 121 | ····<cpe-lang:platform·id="package_bash"> |
| 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_bash:def:1"/> |
| 112 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 113 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 114 | ····<cpe-lang:platform·id="p | 126 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 115 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-p | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="g | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 135 | ········</cpe-lang:logical-test> | ||
| 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 138 | ········</cpe-lang:logical-test> | ||
| 122 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 141 | ····<cpe-lang:platform·id="uefi"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg- | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_uefi:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_ | 146 | ····<cpe-lang:platform·id="package_ntp"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="machine_and_package_ | 151 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 141 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 142 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id="machine_and_package_nftables_and_service_disabled_firewalld"> | ||
| 143 | ····<cpe-lang:platform·id="non-uefi"> | ||
| 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-system_boot_mode_is_non_uefi:def:1"/> | ||
| 146 | ······</cpe-lang:logical-test> | ||
| 147 | ····</cpe-lang:platform> | ||
| 148 | ····<cpe-lang:platform·id="ipv6_enabled"> | ||
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> | ||
| 151 | ······</cpe-lang:logical-test> | ||
| 152 | ····</cpe-lang:platform> | ||
| 153 | ····<cpe-lang:platform·id="package_firewalld"> | ||
| 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_ | 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 162 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 156 | ······</cpe-lang:logical-test> | 163 | ······</cpe-lang:logical-test> |
| 157 | ····</cpe-lang:platform> | 164 | ····</cpe-lang:platform> |
| 158 | ····<cpe-lang:platform·id=" | 165 | ····<cpe-lang:platform·id="package_dnf"> |
| 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 166 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 160 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 161 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 162 | ········</cpe-lang:logical-test> | ||
| 163 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 164 | ········ | 167 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-package_dnf:def:1"/> |
| 165 | ········</cpe-lang:logical-test> | ||
| 166 | ······</cpe-lang:logical-test> | 168 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 169 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 170 | ····<cpe-lang:platform·id="wifi-iface"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 171 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-openeuler2203-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_wifi_interface:def:1"/> |
| 171 | ······</cpe-lang:logical-test> | 173 | ······</cpe-lang:logical-test> |
| 172 | ····</cpe-lang:platform> | 174 | ····</cpe-lang:platform> |
| Max diff block lines reached; 63680/76826 bytes (82.89%) of diff not shown. | |||
| Offset 3, 3345 lines modified | Offset 3, 3345 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_ocil:questionnaire:1"> | ||
| 11 | ······<ocil:title>Configure·ARP·filtering·for·All·IPv4·Interfaces</ocil:title> | ||
| 12 | ······<ocil:actions> | ||
| 13 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_arp_filter_action:testaction:1</ocil:test_action_ref> | ||
| 14 | ······</ocil:actions> | ||
| 15 | ····</ocil:questionnaire> | ||
| 16 | ····<ocil:questionnaire·id="ocil:ssg- | 10 | ····<ocil:questionnaire·id="ocil:ssg-directory_permissions_var_log_audit_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>System·Audit·Logs·Must·Have·Mode·0750·or·Less·Permissive</ocil:title> | ||
| 17 | ······<ocil:title>Resolve·information·before·writing·to·audit·logs</ocil:title> | ||
| 18 | ······<ocil:actions> | ||
| 19 | ········<ocil:test_action_ref>ocil:ssg-auditd_log_format_action:testaction:1</ocil:test_action_ref> | ||
| 20 | ······</ocil:actions> | ||
| 21 | ····</ocil:questionnaire> | ||
| 22 | ····<ocil:questionnaire·id="ocil:ssg-postfix_client_configure_relayhost_ocil:questionnaire:1"> | ||
| 23 | ······<ocil:title>Configure·System·to·Forward·All·Mail·through·a·specific·host</ocil:title> | ||
| 24 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-directory_permissions_var_log_audit_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-s | 16 | ····<ocil:questionnaire·id="ocil:ssg-sudo_add_use_pty_ocil:questionnaire:1"> |
| 29 | ······<ocil:title> | 17 | ······<ocil:title>Ensure·Only·Users·Logged·In·To·Real·tty·Can·Execute·Sudo·-·sudo·use_pty</ocil:title> |
| 30 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg-s | 19 | ········<ocil:test_action_ref>ocil:ssg-sudo_add_use_pty_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg- | 22 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_security_yama_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>En | 23 | ······<ocil:title>Enable·Yama·support</ocil:title> |
| 36 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg- | 25 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_security_yama_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg- | 28 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_var_log_ocil:questionnaire:1"> |
| 41 | ······<ocil:title> | 29 | ······<ocil:title>Verify·Group·Who·Owns·/var/log·Directory</ocil:title> |
| 42 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_var_log_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_set_max_auth_tries_ocil:questionnaire:1"> | ||
| 47 | ···· | 34 | ····<ocil:questionnaire·id="ocil:ssg-file_groupowner_backup_etc_group_ocil:questionnaire:1"> |
| 35 | ······<ocil:title>Verify·Group·Who·Owns·Backup·group·File</ocil:title> | ||
| 48 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 37 | ········<ocil:test_action_ref>ocil:ssg-file_groupowner_backup_etc_group_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_time_clock_settime_ocil:questionnaire:1"> | ||
| 53 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_syn_cookies_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Enable·TCP/IP·syncookie·support</ocil:title> | ||
| 54 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_syn_cookies_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 46 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_panic_on_oops_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 47 | ······<ocil:title>Kernel·panic·oops</ocil:title> |
| 60 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_panic_on_oops_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_mac_modification_usr_share_ocil:questionnaire:1"> | ||
| 65 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_root_password_login_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Disable·SSH·root·Login·with·a·Password·(Insecure)</ocil:title> | ||
| 66 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_root_password_login_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-sshd_d | 58 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 71 | ······<ocil:title>D | 59 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> |
| 72 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-sshd_d | 61 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-au | 64 | ····<ocil:questionnaire·id="ocil:ssg-accounts_logon_fail_delay_ocil:questionnaire:1"> |
| 77 | ······<ocil:title> | 65 | ······<ocil:title>Ensure·the·Logon·Failure·Delay·is·Set·Correctly·in·login.defs</ocil:title> |
| 78 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg-au | 67 | ········<ocil:test_action_ref>ocil:ssg-accounts_logon_fail_delay_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 70 | ····<ocil:questionnaire·id="ocil:ssg-kernel_config_module_sig_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 71 | ······<ocil:title>Enable·module·signature·verification</ocil:title> |
| 84 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 73 | ········<ocil:test_action_ref>ocil:ssg-kernel_config_module_sig_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg-rsyslog_encrypt_offload_actionsendstreamdrivermode_ocil:questionnaire:1"> | ||
| 89 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-package_MFEhiplsm_installed_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Install·the·Host·Intrusion·Prevention·System·(HIPS)·Module</ocil:title> | ||
| 90 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-package_MFEhiplsm_installed_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_ | 82 | ····<ocil:questionnaire·id="ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_ocil:questionnaire:1"> |
| 95 | ······<ocil:title> | 83 | ······<ocil:title>Configure·Sending·and·Accepting·Shared·Media·Redirects·for·All·IPv4·Interfaces</ocil:title> |
| 96 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg-sysctl_ | 85 | ········<ocil:test_action_ref>ocil:ssg-sysctl_net_ipv4_conf_all_shared_media_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-service_syslogng_enabled_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 89 | ······<ocil:title>Enable·syslog-ng·Service</ocil:title> |
| 102 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-service_syslogng_enabled_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg- | 94 | ····<ocil:questionnaire·id="ocil:ssg-file_owner_backup_etc_shadow_ocil:questionnaire:1"> |
| 107 | ······<ocil:title> | 95 | ······<ocil:title>Verify·Group·Who·Owns·Backup·shadow·File</ocil:title> |
| 108 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-file_owner_backup_etc_shadow_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg- | 100 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_compression_ocil:questionnaire:1"> |
| 113 | ······<ocil:title> | 101 | ······<ocil:title>Disable·Compression·Or·Set·Compression·to·delayed</ocil:title> |
| 114 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg- | 103 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_compression_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg-s | 106 | ····<ocil:questionnaire·id="ocil:ssg-service_systemd-journald_enabled_ocil:questionnaire:1"> |
| 119 | ······<ocil:title>En | 107 | ······<ocil:title>Enable·systemd-journald·Service</ocil:title> |
| 120 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg-s | 109 | ········<ocil:test_action_ref>ocil:ssg-service_systemd-journald_enabled_action:testaction:1</ocil:test_action_ref> |
| 122 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 123 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 124 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-file_groupownership_sshd_pub_key_ocil:questionnaire:1"> |
| Max diff block lines reached; 651213/663334 bytes (98.17%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_OPENSUSE"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·openSUSE</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of | 7 | configuration·settings·for·openSUSE.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 142 lines modified | Offset 71, 142 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="not_aa | 89 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 91 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 92 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ········</cpe-lang:logical-test> | 93 | ········</cpe-lang:logical-test> |
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 94 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 94 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 95 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | 96 | ········</cpe-lang:logical-test> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 98 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 99 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 100 | ····<cpe-lang:platform·id="grub2"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_iptables"> | 105 | ····<cpe-lang:platform·id="package_iptables"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 110 | ····<cpe-lang:platform·id="machine"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="package_pam"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="g | 120 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 122 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 123 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 124 | ········</cpe-lang:logical-test> | ||
| 125 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 126 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 127 | ········</cpe-lang:logical-test> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | 135 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 129 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id=" | 142 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 132 | ······<cpe-lang:logical-test·operator=" | 143 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 134 | ······</cpe-lang:logical-test> | ||
| 135 | ····</cpe-lang:platform> | ||
| 136 | ····<cpe-lang:platform·id="package_logrotate"> | ||
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | ||
| 139 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_s | 148 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_s | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="not_ | 153 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 155 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 149 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 156 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | 157 | ········</cpe-lang:logical-test> |
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 152 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | 160 | ········</cpe-lang:logical-test> |
| 154 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 163 | ····<cpe-lang:platform·id="package_chrony"> |
| 157 | ······<cpe-lang:logical-test·operator=" | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-p | 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 166 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 167 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 168 | ····<cpe-lang:platform·id="aarch64_arch"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg- | 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 171 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 172 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id=" | 173 | ····<cpe-lang:platform·id="package_sudo"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 170 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 171 | ········</cpe-lang:logical-test> | ||
| 172 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 173 | ········ | 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-opensuse-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> |
| Max diff block lines reached; 69590/83771 bytes (83.07%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHCOS-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Enterprise·Linux·CoreOS·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Enterprise·Linux·CoreOS·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 336 lines modified | Offset 71, 336 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=container-platform">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> | ||
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_pam"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="package_nftables"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="machine_and_mount_var-log-audit"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:log | 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 96 | ········ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log-audit:def:1"/> |
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> | ||
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | 99 | ········</cpe-lang:logical-test> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="package_tmux"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_tmux:def:1"/> | ||
| 116 | ······</cpe-lang:logical-test> | ||
| 117 | ····</cpe-lang:platform> | ||
| 118 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 119 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 120 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 121 | ······</cpe-lang:logical-test> | ||
| 122 | ····</cpe-lang:platform> | ||
| 123 | ····<cpe-lang:platform·id="machine_and_ | 105 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 124 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var:def:1"/> | ||
| 127 | ······</cpe-lang:logical-test> | ||
| 128 | ····</cpe-lang:platform> | ||
| 129 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 130 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 131 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 132 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 133 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 134 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 135 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 136 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 137 | ······</cpe-lang:logical-test> | 114 | ······</cpe-lang:logical-test> |
| 138 | ····</cpe-lang:platform> | 115 | ····</cpe-lang:platform> |
| 139 | ····<cpe-lang:platform·id="package_b | 116 | ····<cpe-lang:platform·id="package_libreswan"> |
| 140 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 141 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_b | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 142 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 143 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 144 | ····<cpe-lang:platform·id="not_aa | 121 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 145 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 146 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 123 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 147 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 124 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 148 | ········</cpe-lang:logical-test> | 125 | ········</cpe-lang:logical-test> |
| 149 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 126 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 150 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-p | 127 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 151 | ········</cpe-lang:logical-test> | 128 | ········</cpe-lang:logical-test> |
| 152 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 153 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 154 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 155 | ····<cpe-lang:platform·id=" | 132 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 156 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 157 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 135 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 158 | ······</cpe-lang:logical-test> | 136 | ······</cpe-lang:logical-test> |
| 159 | ····</cpe-lang:platform> | 137 | ····</cpe-lang:platform> |
| 160 | ····<cpe-lang:platform·id=" | 138 | ····<cpe-lang:platform·id="grub2"> |
| 161 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 139 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 162 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 163 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_osbuild:def:1"/> | ||
| 164 | ········</cpe-lang:logical-test> | ||
| 165 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_ | 140 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 166 | ······</cpe-lang:logical-test> | 141 | ······</cpe-lang:logical-test> |
| 167 | ····</cpe-lang:platform> | 142 | ····</cpe-lang:platform> |
| 168 | ····<cpe-lang:platform·id=" | 143 | ····<cpe-lang:platform·id="package_iptables"> |
| 169 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 144 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 146 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 147 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="gr | 148 | ····<cpe-lang:platform·id="os_linux_ol_gt_or_eq_8_7"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg- | 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-os_linux_ol_gt_or_eq_8_7:def:1"/> |
| 177 | ······</cpe-lang:logical-test> | 151 | ······</cpe-lang:logical-test> |
| 178 | ····</cpe-lang:platform> | 152 | ····</cpe-lang:platform> |
| 179 | ····<cpe-lang:platform·id="machine | 153 | ····<cpe-lang:platform·id="machine"> |
| 180 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 154 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 181 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 182 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 183 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhcos4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| Max diff block lines reached; 36989/50757 bytes (72.87%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_RHV-4"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·Red·Hat·Virtualization·4</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of | 7 | configuration·settings·for·Red·Hat·Virtualization·4.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 292 lines modified | Offset 71, 292 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 81 | ······</cpe-lang:logical-test> | ||
| 82 | ····</cpe-lang:platform> | ||
| 83 | ····<cpe-lang:platform·id="package_pam"> | ||
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 86 | ······</cpe-lang:logical-test> | ||
| 87 | ····</cpe-lang:platform> | ||
| 88 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="selinux"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 93 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_yum"> |
| 94 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 95 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 96 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 97 | ········</cpe-lang:logical-test> | ||
| 98 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 99 | ········ | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 100 | ········</cpe-lang:logical-test> | ||
| 101 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 88 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 106 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | 92 | ········</cpe-lang:logical-test> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 93 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 109 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 94 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 95 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 111 | ······</cpe-lang:logical-test> | 96 | ······</cpe-lang:logical-test> |
| 112 | ····</cpe-lang:platform> | 97 | ····</cpe-lang:platform> |
| 113 | ····<cpe-lang:platform·id="machine_and_package_ | 98 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 117 | ······</cpe-lang:logical-test> | 102 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 103 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id=" | 104 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-p | 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 122 | ······</cpe-lang:logical-test> | 107 | ······</cpe-lang:logical-test> |
| 123 | ····</cpe-lang:platform> | 108 | ····</cpe-lang:platform> |
| 124 | ····<cpe-lang:platform·id=" | 109 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 110 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 111 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 112 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 113 | ········</cpe-lang:logical-test> | ||
| 114 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 115 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 116 | ········</cpe-lang:logical-test> | ||
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 129 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 130 | ····<cpe-lang:platform·id="machine_and_mount_o | 120 | ····<cpe-lang:platform·id="machine_and_mount_home"> |
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_o | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_home:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | ||
| 125 | ····</cpe-lang:platform> | ||
| 126 | ····<cpe-lang:platform·id="grub2"> | ||
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 134 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_iptables"> | 131 | ····<cpe-lang:platform·id="package_iptables"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 134 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 135 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id=" | 136 | ····<cpe-lang:platform·id="machine"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 139 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 140 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="package_ | 141 | ····<cpe-lang:platform·id="package_pam"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 149 | ······</cpe-lang:logical-test> | 144 | ······</cpe-lang:logical-test> |
| 150 | ····</cpe-lang:platform> | 145 | ····</cpe-lang:platform> |
| 151 | ····<cpe-lang:platform·id=" | 146 | ····<cpe-lang:platform·id="ipv6_enabled"> |
| 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 153 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-ipv6_enabled:def:1"/> |
| 154 | ······</cpe-lang:logical-test> | 149 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 150 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id=" | 151 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 157 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 152 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 158 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 153 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 154 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 155 | ········</cpe-lang:logical-test> | ||
| 156 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 159 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 157 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 160 | ········</cpe-lang:logical-test> | 158 | ········</cpe-lang:logical-test> |
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 162 | ······</cpe-lang:logical-test> | 159 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 160 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id=" | 161 | ····<cpe-lang:platform·id="machine_and_mount_srv"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 162 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 163 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg- | 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_srv:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 165 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 166 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id=" | 167 | ····<cpe-lang:platform·id="package_logrotate"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 172 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_ | 169 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-rhv4-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| Max diff block lines reached; 352727/366000 bytes (96.37%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-12"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·12</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·12.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 359 lines modified | Offset 72, 359 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 82 | ······</cpe-lang:logical-test> | ||
| 83 | ····</cpe-lang:platform> | ||
| 84 | ····<cpe-lang:platform·id="package_pam"> | ||
| 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 87 | ······</cpe-lang:logical-test> | ||
| 88 | ····</cpe-lang:platform> | ||
| 89 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 92 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 93 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 94 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 97 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 98 | ········</cpe-lang:logical-test> | ||
| 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 100 | ········ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 101 | ········</cpe-lang:logical-test> | ||
| 102 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 103 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 104 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 105 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 106 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 108 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 113 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 114 | ········</cpe-lang:logical-test> | 99 | ········</cpe-lang:logical-test> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 118 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 119 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> | ||
| 120 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 123 | ······</cpe-lang:logical-test> | ||
| 124 | ····</cpe-lang:platform> | ||
| 125 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_gdm:def:1"/> | ||
| 128 | ······</cpe-lang:logical-test> | ||
| 129 | ····</cpe-lang:platform> | ||
| 130 | ····<cpe-lang:platform·id="machine_and_mount_var"> | ||
| 131 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 107 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 132 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 108 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 109 | ········</cpe-lang:logical-test> | ||
| 110 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg- | 111 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 112 | ········</cpe-lang:logical-test> | ||
| 134 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="machine_and_ | 115 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_opt:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | ||
| 141 | ····</cpe-lang:platform> | ||
| 142 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 145 | ······</cpe-lang:logical-test> | ||
| 146 | ····</cpe-lang:platform> | ||
| 147 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 148 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 118 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 150 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 151 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 152 | ····<cpe-lang:platform·id=" | 121 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 153 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 155 | ······</cpe-lang:logical-test> | 124 | ······</cpe-lang:logical-test> |
| 156 | ····</cpe-lang:platform> | 125 | ····</cpe-lang:platform> |
| 157 | ····<cpe-lang:platform·id="package_ | 126 | ····<cpe-lang:platform·id="package_libreswan"> |
| 158 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 129 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 130 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id="not_aa | 131 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 133 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 165 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 134 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 166 | ········</cpe-lang:logical-test> | 135 | ········</cpe-lang:logical-test> |
| 167 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 136 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 168 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-p | 137 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 169 | ········</cpe-lang:logical-test> | 138 | ········</cpe-lang:logical-test> |
| 170 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 171 | ······</cpe-lang:logical-test> | ||
| 172 | ····</cpe-lang:platform> | ||
| 173 | ····<cpe-lang:platform·id="package_ntp"> | ||
| 174 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 175 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_ | 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 176 | ······</cpe-lang:logical-test> | ||
| 177 | ····</cpe-lang:platform> | ||
| 178 | ····<cpe-lang:platform·id="selinux"> | ||
| 179 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 180 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle12-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> | ||
| 181 | ······</cpe-lang:logical-test> | 140 | ······</cpe-lang:logical-test> |
| 182 | ····</cpe-lang:platform> | 141 | ····</cpe-lang:platform> |
| Max diff block lines reached; 337998/350704 bytes (96.38%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLE-15"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·15</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·15.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 72, 387 lines modified | Offset 72, 387 lines modified | ||
| 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 77 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 78 | ··<cpe-lang:platform-specification> | 78 | ··<cpe-lang:platform-specification> |
| 79 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 82 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 83 | ······</cpe-lang:logical-test> | ||
| 84 | ····</cpe-lang:platform> | ||
| 85 | ····<cpe-lang:platform·id="not_aarch64_arch"> | ||
| 86 | ······<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | ||
| 88 | ······</cpe-lang:logical-test> | ||
| 89 | ····</cpe-lang:platform> | ||
| 90 | ····<cpe-lang:platform·id="package_pam"> | ||
| 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> | ||
| 93 | ······</cpe-lang:logical-test> | ||
| 94 | ····</cpe-lang:platform> | ||
| 95 | ····<cpe-lang:platform·id=" | 79 | ····<cpe-lang:platform·id="selinux"> |
| 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 80 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 97 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 81 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-selinux_is_enabled:def:1"/> |
| 98 | ······</cpe-lang:logical-test> | 82 | ······</cpe-lang:logical-test> |
| 99 | ····</cpe-lang:platform> | 83 | ····</cpe-lang:platform> |
| 100 | ····<cpe-lang:platform·id=" | 84 | ····<cpe-lang:platform·id="machine_and_mount_var-log"> |
| 101 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 85 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 102 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 103 | ········ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 104 | ········</cpe-lang:logical-test> | ||
| 105 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 106 | ········ | 87 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_var-log:def:1"/> |
| 107 | ········</cpe-lang:logical-test> | ||
| 108 | ······</cpe-lang:logical-test> | 88 | ······</cpe-lang:logical-test> |
| 109 | ····</cpe-lang:platform> | 89 | ····</cpe-lang:platform> |
| 110 | ····<cpe-lang:platform·id=" | 90 | ····<cpe-lang:platform·id="package_nftables"> |
| 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 91 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 113 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 92 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 114 | ······</cpe-lang:logical-test> | 93 | ······</cpe-lang:logical-test> |
| 115 | ····</cpe-lang:platform> | 94 | ····</cpe-lang:platform> |
| 116 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> | 95 | ····<cpe-lang:platform·id="machine_and_not_rhcos4-rhel9_and_service_disabled_nftables_and_service_disabled_ufw"> |
| 117 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 96 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 118 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 97 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 119 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> | 98 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_OS_is_rhcos4_rhel9:def:1"/> |
| 120 | ········</cpe-lang:logical-test> | 99 | ········</cpe-lang:logical-test> |
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> | 101 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_nftables:def:1"/> |
| 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> | 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_ufw:def:1"/> |
| 124 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 125 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 105 | ····<cpe-lang:platform·id="package_nftables_and_service_disabled_firewalld"> | ||
| 126 | ····<cpe-lang:platform·id="machine_and_package_telnet-server"> | ||
| 127 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_telnet-server:def:1"/> | ||
| 130 | ······</cpe-lang:logical-test> | ||
| 131 | ····</cpe-lang:platform> | ||
| 132 | ····<cpe-lang:platform·id="not_s390x_arch"> | ||
| 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_not_s390x:def:1"/> | ||
| 135 | ······</cpe-lang:logical-test> | ||
| 136 | ····</cpe-lang:platform> | ||
| 137 | ····<cpe-lang:platform·id="package_gdm"> | ||
| 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 139 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 108 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 140 | ······</cpe-lang:logical-test> | 109 | ······</cpe-lang:logical-test> |
| 141 | ····</cpe-lang:platform> | 110 | ····</cpe-lang:platform> |
| 142 | ····<cpe-lang:platform·id=" | 111 | ····<cpe-lang:platform·id="not_package_chrony_and_not_package_ntp"> |
| 143 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 112 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 113 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 144 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 114 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_chrony:def:1"/> |
| 115 | ········</cpe-lang:logical-test> | ||
| 116 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 145 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg- | 117 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ntp:def:1"/> |
| 118 | ········</cpe-lang:logical-test> | ||
| 146 | ······</cpe-lang:logical-test> | 119 | ······</cpe-lang:logical-test> |
| 147 | ····</cpe-lang:platform> | 120 | ····</cpe-lang:platform> |
| 148 | ····<cpe-lang:platform·id="machine_and_ | 121 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 149 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 122 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 150 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 123 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 151 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-installed_env_mount_opt:def:1"/> | ||
| 152 | ······</cpe-lang:logical-test> | ||
| 153 | ····</cpe-lang:platform> | ||
| 154 | ····<cpe-lang:platform·id="package_iptables"> | ||
| 155 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 156 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 157 | ······</cpe-lang:logical-test> | ||
| 158 | ····</cpe-lang:platform> | ||
| 159 | ····<cpe-lang:platform·id="package_sudo"> | ||
| 160 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 161 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 124 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 162 | ······</cpe-lang:logical-test> | 125 | ······</cpe-lang:logical-test> |
| 163 | ····</cpe-lang:platform> | 126 | ····</cpe-lang:platform> |
| 164 | ····<cpe-lang:platform·id=" | 127 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 165 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 128 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 166 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 129 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 167 | ······</cpe-lang:logical-test> | 130 | ······</cpe-lang:logical-test> |
| 168 | ····</cpe-lang:platform> | 131 | ····</cpe-lang:platform> |
| 169 | ····<cpe-lang:platform·id="package_ | 132 | ····<cpe-lang:platform·id="package_libreswan"> |
| 170 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 133 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 171 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ | 134 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_libreswan:def:1"/> |
| 172 | ······</cpe-lang:logical-test> | 135 | ······</cpe-lang:logical-test> |
| 173 | ····</cpe-lang:platform> | 136 | ····</cpe-lang:platform> |
| 174 | ····<cpe-lang:platform·id="not_aa | 137 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> |
| 175 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 138 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 176 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 139 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 177 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 140 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 178 | ········</cpe-lang:logical-test> | 141 | ········</cpe-lang:logical-test> |
| 179 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 142 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 180 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-p | 143 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-sle15-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 181 | ········</cpe-lang:logical-test> | 144 | ········</cpe-lang:logical-test> |
| Max diff block lines reached; 375769/389773 bytes (96.41%) of diff not shown. | |||
| Offset 19, 15 lines modified | Offset 19, 15 lines modified | ||
| 19 | ····</ds:checklists> | 19 | ····</ds:checklists> |
| 20 | ····<ds:checks> | 20 | ····<ds:checks> |
| 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> | 21 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-oval.xml"/> |
| 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> | 22 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-ocil.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-ocil.xml"/> |
| 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> | 23 | ······<ds:component-ref·id="scap_org.open-scap_cref_ssg-slmicro5-cpe-oval.xml"·xlink:href="#scap_org.open-scap_comp_ssg-slmicro5-cpe-oval.xml"/> |
| 24 | ····</ds:checks> | 24 | ····</ds:checks> |
| 25 | ··</ds:data-stream> | 25 | ··</ds:data-stream> |
| 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-0 | 26 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-cpe-dictionary.xml"·timestamp="2024-11-03T08:39:34"> |
| 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> | 27 | ····<cpe-dict:cpe-list·xsi:schemaLocation="http://cpe.mitre.org/dictionary/2.0·http://cpe.mitre.org/files/cpe-dictionary_2.1.xsd"> |
| 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> | 28 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.3"> |
| 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> | 29 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.3</cpe-dict:title> |
| 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 30 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 31 | ······</cpe-dict:cpe-item> | 31 | ······</cpe-dict:cpe-item> |
| 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> | 32 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-micro:5.4"> |
| 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> | 33 | ········<cpe-dict:title·xml:lang="en-us">SLE·Micro·5.4</cpe-dict:title> |
| Offset 39, 17 lines modified | Offset 39, 17 lines modified | ||
| 39 | ······</cpe-dict:cpe-item> | 39 | ······</cpe-dict:cpe-item> |
| 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> | 40 | ······<cpe-dict:cpe-item·name="cpe:/o:suse:sle-microos:5.2"> |
| 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> | 41 | ········<cpe-dict:title·xml:lang="en-us">SLE·MicroOS·5.2</cpe-dict:title> |
| 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> | 42 | ········<cpe-dict:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml">oval:ssg-installed_OS_is_slmicro5:def:1</cpe-dict:check> |
| 43 | ······</cpe-dict:cpe-item> | 43 | ······</cpe-dict:cpe-item> |
| 44 | ····</cpe-dict:cpe-list> | 44 | ····</cpe-dict:cpe-list> |
| 45 | ··</ds:component> | 45 | ··</ds:component> |
| 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-0 | 46 | ··<ds:component·id="scap_org.open-scap_comp_ssg-slmicro5-xccdf.xml"·timestamp="2024-11-03T08:39:34"> |
| 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 47 | ····<xccdf-1.2:Benchmark·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 48 | ······<xccdf-1.2:status·date="202 | 48 | ······<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 49 | ······<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 50 | ······<xccdf-1.2:description> | 50 | ······<xccdf-1.2:description> |
| 51 | ········This·guide·presents·a·catalog·of·security-relevant | 51 | ········This·guide·presents·a·catalog·of·security-relevant |
| 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 52 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 53 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 54 | in·order·to·support·security·automation.··The·SCAP·content·is | 54 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 55 | is·available·in·the | 55 | is·available·in·the |
| Offset 116, 22 lines modified | Offset 116, 22 lines modified | ||
| 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 116 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 117 | ······<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 118 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 119 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 120 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 121 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 122 | ······<cpe-lang:platform-specification> | 122 | ······<cpe-lang:platform-specification> |
| 123 | ········<cpe-lang:platform·id=" | 123 | ········<cpe-lang:platform·id="machine"> |
| 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 124 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 125 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 126 | ··········</cpe-lang:logical-test> | 126 | ··········</cpe-lang:logical-test> |
| 127 | ········</cpe-lang:platform> | 127 | ········</cpe-lang:platform> |
| 128 | ········<cpe-lang:platform·id=" | 128 | ········<cpe-lang:platform·id="package_pam"> |
| 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 129 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 130 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 131 | ··········</cpe-lang:logical-test> | 131 | ··········</cpe-lang:logical-test> |
| 132 | ········</cpe-lang:platform> | 132 | ········</cpe-lang:platform> |
| 133 | ········<cpe-lang:platform·id="package_audit"> | 133 | ········<cpe-lang:platform·id="package_audit"> |
| 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> | 134 | ··········<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 135 | ············<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 136 | ··········</cpe-lang:logical-test> | 136 | ··········</cpe-lang:logical-test> |
| 137 | ········</cpe-lang:platform> | 137 | ········</cpe-lang:platform> |
| Offset 1382, 14 lines modified | Offset 1382, 17 lines modified | ||
| 1382 | ············</xccdf-1.2:description> | 1382 | ············</xccdf-1.2:description> |
| 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1383 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1384 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1385 | ············<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1386 | ············<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1387 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1388 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1389 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1390 | name·=·"policycoreutils-python-utils" | ||
| 1391 | version·=·"*"</xccdf-1.2:fix> | ||
| 1389 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1392 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1390 | ··package: | 1393 | ··package: |
| 1391 | ····name:·policycoreutils-python-utils | 1394 | ····name:·policycoreutils-python-utils |
| 1392 | ····state:·present | 1395 | ····state:·present |
| 1393 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1396 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1394 | ··tags: | 1397 | ··tags: |
| 1395 | ··-·CCE-94091-6 | 1398 | ··-·CCE-94091-6 |
| Offset 1403, 17 lines modified | Offset 1406, 14 lines modified | ||
| 1403 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1406 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1404 | class·install_policycoreutils-python-utils·{ | 1407 | class·install_policycoreutils-python-utils·{ |
| 1405 | ··package·{·'policycoreutils-python-utils': | 1408 | ··package·{·'policycoreutils-python-utils': |
| 1406 | ····ensure·=>·'installed', | 1409 | ····ensure·=>·'installed', |
| 1407 | ··} | 1410 | ··} |
| 1408 | }</xccdf-1.2:fix> | 1411 | }</xccdf-1.2:fix> |
| 1409 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1410 | name·=·"policycoreutils-python-utils" | ||
| 1411 | version·=·"*"</xccdf-1.2:fix> | ||
| 1412 | ············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 1412 | ············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| 1413 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils-python-utils_installed:def:1"/> | 1413 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils-python-utils_installed:def:1"/> |
| 1414 | ············</xccdf-1.2:check> | 1414 | ············</xccdf-1.2:check> |
| 1415 | ············<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1415 | ············<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1416 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"/> | 1416 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"/> |
| 1417 | ············</xccdf-1.2:check> | 1417 | ············</xccdf-1.2:check> |
| 1418 | ··········</xccdf-1.2:Rule> | 1418 | ··········</xccdf-1.2:Rule> |
| Offset 1446, 14 lines modified | Offset 1446, 17 lines modified | ||
| 1446 | ··············<html:code>setfiles</html:code> | 1446 | ··············<html:code>setfiles</html:code> |
| 1447 | ··············to·label·filesystems, | 1447 | ··············to·label·filesystems, |
| 1448 | ··············<html:code>newrole</html:code> | 1448 | ··············<html:code>newrole</html:code> |
| 1449 | ··············to | 1449 | ··············to |
| 1450 | switch·roles,·and·so·on. | 1450 | switch·roles,·and·so·on. |
| 1451 | ············</xccdf-1.2:rationale> | 1451 | ············</xccdf-1.2:rationale> |
| 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1452 | ············<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1453 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1454 | name·=·"policycoreutils" | ||
| 1455 | version·=·"*"</xccdf-1.2:fix> | ||
| 1453 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1456 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1454 | ··package: | 1457 | ··package: |
| 1455 | ····name:·policycoreutils | 1458 | ····name:·policycoreutils |
| 1456 | ····state:·present | 1459 | ····state:·present |
| 1457 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1460 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1458 | ··tags: | 1461 | ··tags: |
| 1459 | ··-·CCE-94097-3 | 1462 | ··-·CCE-94097-3 |
| Offset 1467, 17 lines modified | Offset 1470, 14 lines modified | ||
| 1467 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils | 1470 | ············<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils |
| 1468 | class·install_policycoreutils·{ | 1471 | class·install_policycoreutils·{ |
| 1469 | ··package·{·'policycoreutils': | 1472 | ··package·{·'policycoreutils': |
| 1470 | ····ensure·=>·'installed', | 1473 | ····ensure·=>·'installed', |
| 1471 | ··} | 1474 | ··} |
| 1472 | }</xccdf-1.2:fix> | 1475 | }</xccdf-1.2:fix> |
| 1473 | ············<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1474 | name·=·"policycoreutils" | ||
| 1475 | version·=·"*"</xccdf-1.2:fix> | ||
| 1476 | ············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 1476 | ············<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| 1477 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils_installed:def:1"/> | 1477 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils_installed:def:1"/> |
| 1478 | ············</xccdf-1.2:check> | 1478 | ············</xccdf-1.2:check> |
| 1479 | ············<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1479 | ············<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1480 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"/> | 1480 | ··············<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"/> |
| 1481 | ············</xccdf-1.2:check> | 1481 | ············</xccdf-1.2:check> |
| Max diff block lines reached; 107367/117305 bytes (91.53%) of diff not shown. | |||
| Offset 3, 421 lines modified | Offset 3, 421 lines modified | ||
| 3 | ··<ocil:generator> | 3 | ··<ocil:generator> |
| 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> | 4 | ····<ocil:product_name>build_shorthand.py·from·SCAP·Security·Guide</ocil:product_name> |
| 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> | 5 | ····<ocil:product_version>ssg:·0.1.74</ocil:product_version> |
| 6 | ····<ocil:schema_version>2.0</ocil:schema_version> | 6 | ····<ocil:schema_version>2.0</ocil:schema_version> |
| 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> | 7 | ····<ocil:timestamp>2024-11-02T18:39:34</ocil:timestamp> |
| 8 | ··</ocil:generator> | 8 | ··</ocil:generator> |
| 9 | ··<ocil:questionnaires> | 9 | ··<ocil:questionnaires> |
| 10 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_crontab_ocil:questionnaire:1"> | ||
| 11 | ···· | 10 | ····<ocil:questionnaire·id="ocil:ssg-selinux_policytype_ocil:questionnaire:1"> |
| 11 | ······<ocil:title>Configure·SELinux·Policy</ocil:title> | ||
| 12 | ······<ocil:actions> | 12 | ······<ocil:actions> |
| 13 | ········<ocil:test_action_ref>ocil:ssg- | 13 | ········<ocil:test_action_ref>ocil:ssg-selinux_policytype_action:testaction:1</ocil:test_action_ref> |
| 14 | ······</ocil:actions> | 14 | ······</ocil:actions> |
| 15 | ····</ocil:questionnaire> | 15 | ····</ocil:questionnaire> |
| 16 | ····<ocil:questionnaire·id="ocil:ssg-accounts_passwords_pam_faildelay_delay_ocil:questionnaire:1"> | ||
| 17 | ···· | 16 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> |
| 17 | ······<ocil:title>Ensure·the·default·plugins·for·the·audit·dispatcher·are·Installed</ocil:title> | ||
| 18 | ······<ocil:actions> | 18 | ······<ocil:actions> |
| 19 | ········<ocil:test_action_ref>ocil:ssg-ac | 19 | ········<ocil:test_action_ref>ocil:ssg-package_audit-audispd-plugins_installed_action:testaction:1</ocil:test_action_ref> |
| 20 | ······</ocil:actions> | 20 | ······</ocil:actions> |
| 21 | ····</ocil:questionnaire> | 21 | ····</ocil:questionnaire> |
| 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 22 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_modprobe_ocil:questionnaire:1"> |
| 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 23 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·modprobe</ocil:title> |
| 24 | ······<ocil:actions> | 24 | ······<ocil:actions> |
| 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 25 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_modprobe_action:testaction:1</ocil:test_action_ref> |
| 26 | ······</ocil:actions> | 26 | ······</ocil:actions> |
| 27 | ····</ocil:questionnaire> | 27 | ····</ocil:questionnaire> |
| 28 | ····<ocil:questionnaire·id="ocil:ssg-package_audit-audispd-plugins_installed_ocil:questionnaire:1"> | ||
| 29 | ···· | 28 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_kmod_ocil:questionnaire:1"> |
| 29 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·kmod</ocil:title> | ||
| 30 | ······<ocil:actions> | 30 | ······<ocil:actions> |
| 31 | ········<ocil:test_action_ref>ocil:ssg- | 31 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_kmod_action:testaction:1</ocil:test_action_ref> |
| 32 | ······</ocil:actions> | 32 | ······</ocil:actions> |
| 33 | ····</ocil:questionnaire> | 33 | ····</ocil:questionnaire> |
| 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 34 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_passwd_ocil:questionnaire:1"> |
| 35 | ······<ocil:title> | 35 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·passwd</ocil:title> |
| 36 | ······<ocil:actions> | 36 | ······<ocil:actions> |
| 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 37 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_passwd_action:testaction:1</ocil:test_action_ref> |
| 38 | ······</ocil:actions> | 38 | ······</ocil:actions> |
| 39 | ····</ocil:questionnaire> | 39 | ····</ocil:questionnaire> |
| 40 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"> | ||
| 41 | ···· | 40 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_empty_passwords_ocil:questionnaire:1"> |
| 41 | ······<ocil:title>Disable·SSH·Access·via·Empty·Passwords</ocil:title> | ||
| 42 | ······<ocil:actions> | 42 | ······<ocil:actions> |
| 43 | ········<ocil:test_action_ref>ocil:ssg- | 43 | ········<ocil:test_action_ref>ocil:ssg-sshd_disable_empty_passwords_action:testaction:1</ocil:test_action_ref> |
| 44 | ······</ocil:actions> | 44 | ······</ocil:actions> |
| 45 | ····</ocil:questionnaire> | 45 | ····</ocil:questionnaire> |
| 46 | ····<ocil:questionnaire·id="ocil:ssg-sshd_disable_user_known_hosts_ocil:questionnaire:1"> | ||
| 47 | ···· | 46 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chfn_ocil:questionnaire:1"> |
| 47 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chfn</ocil:title> | ||
| 48 | ······<ocil:actions> | 48 | ······<ocil:actions> |
| 49 | ········<ocil:test_action_ref>ocil:ssg- | 49 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chfn_action:testaction:1</ocil:test_action_ref> |
| 50 | ······</ocil:actions> | 50 | ······</ocil:actions> |
| 51 | ····</ocil:questionnaire> | 51 | ····</ocil:questionnaire> |
| 52 | ····<ocil:questionnaire·id="ocil:ssg-sshd_enable_warning_banner_ocil:questionnaire:1"> | ||
| 53 | ···· | 52 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_newgrp_ocil:questionnaire:1"> |
| 53 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·newgrp</ocil:title> | ||
| 54 | ······<ocil:actions> | 54 | ······<ocil:actions> |
| 55 | ········<ocil:test_action_ref>ocil:ssg- | 55 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_newgrp_action:testaction:1</ocil:test_action_ref> |
| 56 | ······</ocil:actions> | 56 | ······</ocil:actions> |
| 57 | ····</ocil:questionnaire> | 57 | ····</ocil:questionnaire> |
| 58 | ····<ocil:questionnaire·id="ocil:ssg- | 58 | ····<ocil:questionnaire·id="ocil:ssg-installed_OS_is_vendor_supported_ocil:questionnaire:1"> |
| 59 | ······<ocil:title> | 59 | ······<ocil:title>The·Installed·Operating·System·Is·Vendor·Supported</ocil:title> |
| 60 | ······<ocil:actions> | 60 | ······<ocil:actions> |
| 61 | ········<ocil:test_action_ref>ocil:ssg- | 61 | ········<ocil:test_action_ref>ocil:ssg-installed_OS_is_vendor_supported_action:testaction:1</ocil:test_action_ref> |
| 62 | ······</ocil:actions> | 62 | ······</ocil:actions> |
| 63 | ····</ocil:questionnaire> | 63 | ····</ocil:questionnaire> |
| 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ch | 64 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chage_ocil:questionnaire:1"> |
| 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·ch | 65 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chage</ocil:title> |
| 66 | ······<ocil:actions> | 66 | ······<ocil:actions> |
| 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ch | 67 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chage_action:testaction:1</ocil:test_action_ref> |
| 68 | ······</ocil:actions> | 68 | ······</ocil:actions> |
| 69 | ····</ocil:questionnaire> | 69 | ····</ocil:questionnaire> |
| 70 | ····<ocil:questionnaire·id="ocil:ssg-a | 70 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_setfiles_ocil:questionnaire:1"> |
| 71 | ······<ocil:title> | 71 | ······<ocil:title>Record·Any·Attempts·to·Run·setfiles</ocil:title> |
| 72 | ······<ocil:actions> | 72 | ······<ocil:actions> |
| 73 | ········<ocil:test_action_ref>ocil:ssg-a | 73 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_setfiles_action:testaction:1</ocil:test_action_ref> |
| 74 | ······</ocil:actions> | 74 | ······</ocil:actions> |
| 75 | ····</ocil:questionnaire> | 75 | ····</ocil:questionnaire> |
| 76 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"> | ||
| 77 | ···· | 76 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_rmmod_ocil:questionnaire:1"> |
| 77 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·rmmod</ocil:title> | ||
| 78 | ······<ocil:actions> | 78 | ······<ocil:actions> |
| 79 | ········<ocil:test_action_ref>ocil:ssg- | 79 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_rmmod_action:testaction:1</ocil:test_action_ref> |
| 80 | ······</ocil:actions> | 80 | ······</ocil:actions> |
| 81 | ····</ocil:questionnaire> | 81 | ····</ocil:questionnaire> |
| 82 | ····<ocil:questionnaire·id="ocil:ssg- | 82 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_usergroup_modification_passwd_ocil:questionnaire:1"> |
| 83 | ······<ocil:title> | 83 | ······<ocil:title>Record·Events·that·Modify·User/Group·Information·-·/etc/passwd</ocil:title> |
| 84 | ······<ocil:actions> | 84 | ······<ocil:actions> |
| 85 | ········<ocil:test_action_ref>ocil:ssg- | 85 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_usergroup_modification_passwd_action:testaction:1</ocil:test_action_ref> |
| 86 | ······</ocil:actions> | 86 | ······</ocil:actions> |
| 87 | ····</ocil:questionnaire> | 87 | ····</ocil:questionnaire> |
| 88 | ····<ocil:questionnaire·id="ocil:ssg- | 88 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_semanage_ocil:questionnaire:1"> |
| 89 | ······<ocil:title> | 89 | ······<ocil:title>Record·Any·Attempts·to·Run·semanage</ocil:title> |
| 90 | ······<ocil:actions> | 90 | ······<ocil:actions> |
| 91 | ········<ocil:test_action_ref>ocil:ssg- | 91 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_semanage_action:testaction:1</ocil:test_action_ref> |
| 92 | ······</ocil:actions> | 92 | ······</ocil:actions> |
| 93 | ····</ocil:questionnaire> | 93 | ····</ocil:questionnaire> |
| 94 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_unix_chkpwd_ocil:questionnaire:1"> | ||
| 95 | ···· | 94 | ····<ocil:questionnaire·id="ocil:ssg-sshd_do_not_permit_user_env_ocil:questionnaire:1"> |
| 95 | ······<ocil:title>Do·Not·Allow·SSH·Environment·Options</ocil:title> | ||
| 96 | ······<ocil:actions> | 96 | ······<ocil:actions> |
| 97 | ········<ocil:test_action_ref>ocil:ssg- | 97 | ········<ocil:test_action_ref>ocil:ssg-sshd_do_not_permit_user_env_action:testaction:1</ocil:test_action_ref> |
| 98 | ······</ocil:actions> | 98 | ······</ocil:actions> |
| 99 | ····</ocil:questionnaire> | 99 | ····</ocil:questionnaire> |
| 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_e | 100 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_chsh_ocil:questionnaire:1"> |
| 101 | ······<ocil:title> | 101 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·chsh</ocil:title> |
| 102 | ······<ocil:actions> | 102 | ······<ocil:actions> |
| 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_e | 103 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_chsh_action:testaction:1</ocil:test_action_ref> |
| 104 | ······</ocil:actions> | 104 | ······</ocil:actions> |
| 105 | ····</ocil:questionnaire> | 105 | ····</ocil:questionnaire> |
| 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_ | 106 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_privileged_commands_su_ocil:questionnaire:1"> |
| 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-· | 107 | ······<ocil:title>Ensure·auditd·Collects·Information·on·the·Use·of·Privileged·Commands·-·su</ocil:title> |
| 108 | ······<ocil:actions> | 108 | ······<ocil:actions> |
| 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_ | 109 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_privileged_commands_su_action:testaction:1</ocil:test_action_ref> |
| 110 | ······</ocil:actions> | 110 | ······</ocil:actions> |
| 111 | ····</ocil:questionnaire> | 111 | ····</ocil:questionnaire> |
| 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_rm_ocil:questionnaire:1"> | 112 | ····<ocil:questionnaire·id="ocil:ssg-audit_rules_execution_rm_ocil:questionnaire:1"> |
| 113 | ······<ocil:title>Record·Any·Attempts·to·Run·rm</ocil:title> | 113 | ······<ocil:title>Record·Any·Attempts·to·Run·rm</ocil:title> |
| 114 | ······<ocil:actions> | 114 | ······<ocil:actions> |
| 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_rm_action:testaction:1</ocil:test_action_ref> | 115 | ········<ocil:test_action_ref>ocil:ssg-audit_rules_execution_rm_action:testaction:1</ocil:test_action_ref> |
| 116 | ······</ocil:actions> | 116 | ······</ocil:actions> |
| 117 | ····</ocil:questionnaire> | 117 | ····</ocil:questionnaire> |
| 118 | ····<ocil:questionnaire·id="ocil:ssg- | 118 | ····<ocil:questionnaire·id="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"> |
| 119 | ······<ocil:title> | 119 | ······<ocil:title>Install·policycoreutils·Package</ocil:title> |
| 120 | ······<ocil:actions> | 120 | ······<ocil:actions> |
| 121 | ········<ocil:test_action_ref>ocil:ssg- | 121 | ········<ocil:test_action_ref>ocil:ssg-package_policycoreutils_installed_action:testaction:1</ocil:test_action_ref> |
| Max diff block lines reached; 84122/96958 bytes (86.76%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_SLMICRO5"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·SUSE·Linux·Enterprise·Micro·5</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of | 7 | configuration·settings·for·SUSE·Linux·Enterprise·Micro·5.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 22 lines modified | Offset 71, 22 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="machine"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id=" | 83 | ····<cpe-lang:platform·id="package_pam"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg- | 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 86 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 87 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id="package_audit"> | 88 | ····<cpe-lang:platform·id="package_audit"> |
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> | 90 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-slmicro5-cpe-oval.xml"·id-ref="oval:ssg-package_audit:def:1"/> |
| 91 | ······</cpe-lang:logical-test> | 91 | ······</cpe-lang:logical-test> |
| 92 | ····</cpe-lang:platform> | 92 | ····</cpe-lang:platform> |
| Offset 1337, 14 lines modified | Offset 1337, 17 lines modified | ||
| 1337 | ········</xccdf-1.2:description> | 1337 | ········</xccdf-1.2:description> |
| 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> | 1338 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000480-GPOS-00227</xccdf-1.2:reference> |
| 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> | 1339 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-654220</xccdf-1.2:reference> |
| 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> | 1340 | ········<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261467r996808_rule</xccdf-1.2:reference> |
| 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. | 1341 | ········<xccdf-1.2:rationale>This·package·is·required·to·operate·and·manage·an·SELinux·environment·and·its·policies. |
| 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> | 1342 | It·provides·utilities·such·as·semanage,·audit2allow,·audit2why,·chcat·and·sandbox.</xccdf-1.2:rationale> |
| 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> | 1343 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94091-6</xccdf-1.2:ident> |
| 1344 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1345 | name·=·"policycoreutils-python-utils" | ||
| 1346 | version·=·"*"</xccdf-1.2:fix> | ||
| 1344 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed | 1347 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils-python-utils·is·installed |
| 1345 | ··package: | 1348 | ··package: |
| 1346 | ····name:·policycoreutils-python-utils | 1349 | ····name:·policycoreutils-python-utils |
| 1347 | ····state:·present | 1350 | ····state:·present |
| 1348 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1351 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1349 | ··tags: | 1352 | ··tags: |
| 1350 | ··-·CCE-94091-6 | 1353 | ··-·CCE-94091-6 |
| Offset 1358, 17 lines modified | Offset 1361, 14 lines modified | ||
| 1358 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils | 1361 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils-python-utils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils-python-utils |
| 1359 | class·install_policycoreutils-python-utils·{ | 1362 | class·install_policycoreutils-python-utils·{ |
| 1360 | ··package·{·'policycoreutils-python-utils': | 1363 | ··package·{·'policycoreutils-python-utils': |
| 1361 | ····ensure·=>·'installed', | 1364 | ····ensure·=>·'installed', |
| 1362 | ··} | 1365 | ··} |
| 1363 | }</xccdf-1.2:fix> | 1366 | }</xccdf-1.2:fix> |
| 1364 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils-python-utils_installed">[[packages]] | ||
| 1365 | name·=·"policycoreutils-python-utils" | ||
| 1366 | version·=·"*"</xccdf-1.2:fix> | ||
| 1367 | ········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 1367 | ········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| 1368 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils-python-utils_installed:def:1"/> | 1368 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils-python-utils_installed:def:1"/> |
| 1369 | ········</xccdf-1.2:check> | 1369 | ········</xccdf-1.2:check> |
| 1370 | ········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1370 | ········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1371 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"/> | 1371 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils-python-utils_installed_ocil:questionnaire:1"/> |
| 1372 | ········</xccdf-1.2:check> | 1372 | ········</xccdf-1.2:check> |
| 1373 | ······</xccdf-1.2:Rule> | 1373 | ······</xccdf-1.2:Rule> |
| Offset 1401, 14 lines modified | Offset 1401, 17 lines modified | ||
| 1401 | ··········<html:code>setfiles</html:code> | 1401 | ··········<html:code>setfiles</html:code> |
| 1402 | ··········to·label·filesystems, | 1402 | ··········to·label·filesystems, |
| 1403 | ··········<html:code>newrole</html:code> | 1403 | ··········<html:code>newrole</html:code> |
| 1404 | ··········to | 1404 | ··········to |
| 1405 | switch·roles,·and·so·on. | 1405 | switch·roles,·and·so·on. |
| 1406 | ········</xccdf-1.2:rationale> | 1406 | ········</xccdf-1.2:rationale> |
| 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> | 1407 | ········<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94097-3</xccdf-1.2:ident> |
| 1408 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1409 | name·=·"policycoreutils" | ||
| 1410 | version·=·"*"</xccdf-1.2:fix> | ||
| 1408 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed | 1411 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·policycoreutils·is·installed |
| 1409 | ··package: | 1412 | ··package: |
| 1410 | ····name:·policycoreutils | 1413 | ····name:·policycoreutils |
| 1411 | ····state:·present | 1414 | ····state:·present |
| 1412 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 1415 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 1413 | ··tags: | 1416 | ··tags: |
| 1414 | ··-·CCE-94097-3 | 1417 | ··-·CCE-94097-3 |
| Offset 1422, 17 lines modified | Offset 1425, 14 lines modified | ||
| 1422 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils | 1425 | ········<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_policycoreutils_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_policycoreutils |
| 1423 | class·install_policycoreutils·{ | 1426 | class·install_policycoreutils·{ |
| 1424 | ··package·{·'policycoreutils': | 1427 | ··package·{·'policycoreutils': |
| 1425 | ····ensure·=>·'installed', | 1428 | ····ensure·=>·'installed', |
| 1426 | ··} | 1429 | ··} |
| 1427 | }</xccdf-1.2:fix> | 1430 | }</xccdf-1.2:fix> |
| 1428 | ········<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_policycoreutils_installed">[[packages]] | ||
| 1429 | name·=·"policycoreutils" | ||
| 1430 | version·=·"*"</xccdf-1.2:fix> | ||
| 1431 | ········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> | 1431 | ········<xccdf-1.2:check·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"> |
| 1432 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils_installed:def:1"/> | 1432 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-oval.xml"·name="oval:ssg-package_policycoreutils_installed:def:1"/> |
| 1433 | ········</xccdf-1.2:check> | 1433 | ········</xccdf-1.2:check> |
| 1434 | ········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> | 1434 | ········<xccdf-1.2:check·system="http://scap.nist.gov/schema/ocil/2"> |
| 1435 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"/> | 1435 | ··········<xccdf-1.2:check-content-ref·href="ssg-slmicro5-ocil.xml"·name="ocil:ssg-package_policycoreutils_installed_ocil:questionnaire:1"/> |
| 1436 | ········</xccdf-1.2:check> | 1436 | ········</xccdf-1.2:check> |
| 1437 | ······</xccdf-1.2:Rule> | 1437 | ······</xccdf-1.2:Rule> |
| Offset 3690, 14 lines modified | Offset 3690, 17 lines modified | ||
| 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> | 3690 | ······<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">Req-10.5.3</xccdf-1.2:reference> |
| 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> | 3691 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">SRG-OS-000342-GPOS-00133</xccdf-1.2:reference> |
| 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> | 3692 | ······<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">10.3.3</xccdf-1.2:reference> |
| 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> | 3693 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">SLEM-05-653025</xccdf-1.2:reference> |
| 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> | 3694 | ······<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">SV-261413r996652_rule</xccdf-1.2:reference> |
| 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> | 3695 | ······<xccdf-1.2:rationale>Information·stored·in·one·location·is·vulnerable·to·accidental·or·incidental·deletion·or·alteration.·Off-loading·is·a·common·process·in·information·systems·with·limited·audit·storage·capacity.</xccdf-1.2:rationale> |
| 3696 | ······<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94096-5</xccdf-1.2:ident> | 3696 | ······<xccdf-1.2:ident·system="https://ncp.nist.gov/cce">CCE-94096-5</xccdf-1.2:ident> |
| 3697 | ······<xccdf-1.2:fix·system="urn:redhat:osbuild:blueprint"·id="package_audit-audispd-plugins_installed">[[packages]] | ||
| 3698 | name·=·"audit-audispd-plugins" | ||
| 3699 | version·=·"*"</xccdf-1.2:fix> | ||
| 3697 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·audit-audispd-plugins·is·installed | 3700 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:ansible"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">-·name:·Ensure·audit-audispd-plugins·is·installed |
| 3698 | ··package: | 3701 | ··package: |
| 3699 | ····name:·audit-audispd-plugins | 3702 | ····name:·audit-audispd-plugins |
| 3700 | ····state:·present | 3703 | ····state:·present |
| 3701 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] | 3704 | ··when:·ansible_virtualization_type·not·in·["docker",·"lxc",·"openvz",·"podman",·"container"] |
| 3702 | ··tags: | 3705 | ··tags: |
| 3703 | ··-·CCE-94096-5 | 3706 | ··-·CCE-94096-5 |
| Offset 3713, 17 lines modified | Offset 3716, 14 lines modified | ||
| 3713 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_audit-audispd-plugins | 3716 | ······<xccdf-1.2:fix·system="urn:xccdf:fix:script:puppet"·id="package_audit-audispd-plugins_installed"·complexity="low"·disruption="low"·reboot="false"·strategy="enable">include·install_audit-audispd-plugins |
| 3714 | class·install_audit-audispd-plugins·{ | 3717 | class·install_audit-audispd-plugins·{ |
| Max diff block lines reached; 762/10826 bytes (7.04%) of diff not shown. | |||
| Offset 1, 10 lines modified | Offset 1, 10 lines modified | ||
| 1 | <?xml·version="1.0"·encoding="utf-8"?> | 1 | <?xml·version="1.0"·encoding="utf-8"?> |
| 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> | 2 | <xccdf-1.2:Benchmark·xmlns:cpe-lang="http://cpe.mitre.org/language/2.0"·xmlns:dc="http://purl.org/dc/elements/1.1/"·xmlns:html="http://www.w3.org/1999/xhtml"·xmlns:xccdf-1.2="http://checklists.nist.gov/xccdf/1.2"·xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"·id="xccdf_org.ssgproject.content_benchmark_UOS-20"·xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.2·xccdf-1.2.xsd"·style="SCAP_1.2"·resolved="true"·xml:lang="en-US"> |
| 3 | ··<xccdf-1.2:status·date="202 | 3 | ··<xccdf-1.2:status·date="2025-01-23">draft</xccdf-1.2:status> |
| 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> | 4 | ··<xccdf-1.2:title>Guide·to·the·Secure·Configuration·of·UnionTech·OS·Server·20</xccdf-1.2:title> |
| 5 | ··<xccdf-1.2:description> | 5 | ··<xccdf-1.2:description> |
| 6 | ····This·guide·presents·a·catalog·of·security-relevant | 6 | ····This·guide·presents·a·catalog·of·security-relevant |
| 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of | 7 | configuration·settings·for·UnionTech·OS·Server·20.·It·is·a·rendering·of |
| 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) | 8 | content·structured·in·the·eXtensible·Configuration·Checklist·Description·Format·(XCCDF) |
| 9 | in·order·to·support·security·automation.··The·SCAP·content·is | 9 | in·order·to·support·security·automation.··The·SCAP·content·is |
| 10 | is·available·in·the | 10 | is·available·in·the |
| Offset 71, 158 lines modified | Offset 71, 158 lines modified | ||
| 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> | 71 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cgeneral-purpose-os">os-srg</xccdf-1.2:reference> |
| 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> | 72 | ··<xccdf-1.2:reference·href="https://www.niap-ccevs.org/Profile/PP.cfm">ospp</xccdf-1.2:reference> |
| 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> | 73 | ··<xccdf-1.2:reference·href="https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf">pcidss</xccdf-1.2:reference> |
| 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> | 74 | ··<xccdf-1.2:reference·href="https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0.pdf">pcidss4</xccdf-1.2:reference> |
| 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> | 75 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux">stigid</xccdf-1.2:reference> |
| 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> | 76 | ··<xccdf-1.2:reference·href="https://public.cyber.mil/stigs/srg-stig-tools/">stigref</xccdf-1.2:reference> |
| 77 | ··<cpe-lang:platform-specification> | 77 | ··<cpe-lang:platform-specification> |
| 78 | ····<cpe-lang:platform·id=" | 78 | ····<cpe-lang:platform·id="package_yum"> |
| 79 | ······<cpe-lang:logical-test·operator="AND"·negate=" | 79 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 80 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_yum:def:1"/> |
| 81 | ······</cpe-lang:logical-test> | 81 | ······</cpe-lang:logical-test> |
| 82 | ····</cpe-lang:platform> | 82 | ····</cpe-lang:platform> |
| 83 | ····<cpe-lang:platform·id="package_ | 83 | ····<cpe-lang:platform·id="machine_and_package_ufw"> |
| 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 84 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 85 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 86 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 86 | ······</cpe-lang:logical-test> | 87 | ······</cpe-lang:logical-test> |
| 87 | ····</cpe-lang:platform> | 88 | ····</cpe-lang:platform> |
| 88 | ····<cpe-lang:platform·id=" | 89 | ····<cpe-lang:platform·id="x86_64_arch"> |
| 90 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 91 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | ||
| 92 | ······</cpe-lang:logical-test> | ||
| 93 | ····</cpe-lang:platform> | ||
| 94 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw_and_package_iptables"> | ||
| 89 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 95 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 90 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 96 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 91 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 97 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> |
| 92 | ········</cpe-lang:logical-test> | 98 | ········</cpe-lang:logical-test> |
| 93 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 99 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 94 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 100 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 95 | ········</cpe-lang:logical-test> | 101 | ········</cpe-lang:logical-test> |
| 102 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | ||
| 96 | ······</cpe-lang:logical-test> | 103 | ······</cpe-lang:logical-test> |
| 97 | ····</cpe-lang:platform> | 104 | ····</cpe-lang:platform> |
| 98 | ····<cpe-lang:platform·id=" | 105 | ····<cpe-lang:platform·id="grub2"> |
| 99 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 106 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 100 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 107 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> |
| 101 | ······</cpe-lang:logical-test> | 108 | ······</cpe-lang:logical-test> |
| 102 | ····</cpe-lang:platform> | 109 | ····</cpe-lang:platform> |
| 103 | ····<cpe-lang:platform·id="package_iptables"> | 110 | ····<cpe-lang:platform·id="package_iptables"> |
| 104 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 111 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 105 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> | 112 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 106 | ······</cpe-lang:logical-test> | 113 | ······</cpe-lang:logical-test> |
| 107 | ····</cpe-lang:platform> | 114 | ····</cpe-lang:platform> |
| 108 | ····<cpe-lang:platform·id=" | 115 | ····<cpe-lang:platform·id="machine"> |
| 109 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 110 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_sudo:def:1"/> | ||
| 111 | ······</cpe-lang:logical-test> | ||
| 112 | ····</cpe-lang:platform> | ||
| 113 | ····<cpe-lang:platform·id="machine_and_package_ufw"> | ||
| 114 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 116 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 115 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | 117 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 116 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> | ||
| 117 | ······</cpe-lang:logical-test> | 118 | ······</cpe-lang:logical-test> |
| 118 | ····</cpe-lang:platform> | 119 | ····</cpe-lang:platform> |
| 119 | ····<cpe-lang:platform·id="g | 120 | ····<cpe-lang:platform·id="package_pam"> |
| 120 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | ||
| 121 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_has_grub2_package:def:1"/> | ||
| 122 | ······</cpe-lang:logical-test> | ||
| 123 | ····</cpe-lang:platform> | ||
| 124 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> | ||
| 125 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 121 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 126 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> | ||
| 127 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 122 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_pam:def:1"/> |
| 128 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> | ||
| 129 | ······</cpe-lang:logical-test> | 123 | ······</cpe-lang:logical-test> |
| 130 | ····</cpe-lang:platform> | 124 | ····</cpe-lang:platform> |
| 131 | ····<cpe-lang:platform·id="package_ | 125 | ····<cpe-lang:platform·id="not_package_nftables_and_not_package_ufw"> |
| 132 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 126 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 127 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 128 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_nftables:def:1"/> | ||
| 129 | ········</cpe-lang:logical-test> | ||
| 130 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 133 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 131 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ufw:def:1"/> |
| 132 | ········</cpe-lang:logical-test> | ||
| 134 | ······</cpe-lang:logical-test> | 133 | ······</cpe-lang:logical-test> |
| 135 | ····</cpe-lang:platform> | 134 | ····</cpe-lang:platform> |
| 136 | ····<cpe-lang:platform·id="package_logrotate"> | 135 | ····<cpe-lang:platform·id="package_logrotate"> |
| 137 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 136 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 138 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> | 137 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_logrotate:def:1"/> |
| 139 | ······</cpe-lang:logical-test> | 138 | ······</cpe-lang:logical-test> |
| 140 | ····</cpe-lang:platform> | 139 | ····</cpe-lang:platform> |
| 141 | ····<cpe-lang:platform·id="package_ | 140 | ····<cpe-lang:platform·id="package_bind"> |
| 142 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 141 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 143 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_ | 142 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_bind:def:1"/> |
| 144 | ······</cpe-lang:logical-test> | 143 | ······</cpe-lang:logical-test> |
| 145 | ····</cpe-lang:platform> | 144 | ····</cpe-lang:platform> |
| 146 | ····<cpe-lang:platform·id="n | 145 | ····<cpe-lang:platform·id="machine_and_package_iptables_and_service_disabled_firewalld"> |
| 147 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 146 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 148 | ········<cpe-lang:log | 147 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-installed_env_is_a_machine:def:1"/> |
| 149 | ········ | 148 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_iptables:def:1"/> |
| 150 | ········</cpe-lang:logical-test> | ||
| 151 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | ||
| 152 | ········ | 149 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-service_disabled_firewalld:def:1"/> |
| 153 | ········</cpe-lang:logical-test> | ||
| 154 | ······</cpe-lang:logical-test> | 150 | ······</cpe-lang:logical-test> |
| 155 | ····</cpe-lang:platform> | 151 | ····</cpe-lang:platform> |
| 156 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> | 152 | ····<cpe-lang:platform·id="aarch64_arch_or_x86_64_arch"> |
| 157 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> | 153 | ······<cpe-lang:logical-test·operator="OR"·negate="false"> |
| 158 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> | 154 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 159 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> | 155 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_x86_64:def:1"/> |
| 160 | ······</cpe-lang:logical-test> | 156 | ······</cpe-lang:logical-test> |
| 161 | ····</cpe-lang:platform> | 157 | ····</cpe-lang:platform> |
| 162 | ····<cpe-lang:platform·id=" | 158 | ····<cpe-lang:platform·id="package_rsh-server"> |
| 163 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 159 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 164 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg- | 160 | ········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-package_rsh-server:def:1"/> |
| 165 | ······</cpe-lang:logical-test> | 161 | ······</cpe-lang:logical-test> |
| 166 | ····</cpe-lang:platform> | 162 | ····</cpe-lang:platform> |
| 167 | ····<cpe-lang:platform·id="not_ | 163 | ····<cpe-lang:platform·id="not_aarch64_arch_and_not_s390x_arch"> |
| 168 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> | 164 | ······<cpe-lang:logical-test·operator="AND"·negate="false"> |
| 169 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 165 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 170 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 166 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_aarch64:def:1"/> |
| 171 | ········</cpe-lang:logical-test> | 167 | ········</cpe-lang:logical-test> |
| 172 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> | 168 | ········<cpe-lang:logical-test·operator="AND"·negate="true"> |
| 173 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-p | 169 | ··········<cpe-lang:check-fact-ref·system="http://oval.mitre.org/XMLSchema/oval-definitions-5"·href="ssg-uos20-cpe-oval.xml"·id-ref="oval:ssg-proc_sys_kernel_osrelease_arch_s390x:def:1"/> |
| 174 | ········</cpe-lang:logical-test> | 170 | ········</cpe-lang:logical-test> |
| Max diff block lines reached; 84557/98383 bytes (85.95%) of diff not shown. | |||